Compliance. Made Simple

We want that too

We are on your side. Our mission is to lessen the burden of Data Protection compliance on small and medium-sized businesses.

 

We believe that you carry an unfair burden to comply with changing regulations and keeping up to date with the latest information and trends in effective data privacy and security.

 

We do the legwork so you don’t have to.

 

So…let’s keep it simple

Our roadmap for compliance is, therefore, straightforward because we like to keep things simple.

If your business is currently collecting and processing personal data, then you have a legal requirement to ensure you operate according to the data protection regulations .  Every business and industry is different as some have more complex requirements than others.  Compliance is important.

 

A medical practice, for example, will process more sensitive personal data than an online retailer.  Therefore, this means they have higher data risks because of the data they process, so they may need additional controls or consent management processes in place.

 

How can we help you? 

We guide you through your data protection compliance journey in a straightforward and simple way.  To help you do this, we have specifically designed our consultancy services to be flexible for your business.

To do this, we work with you to provide expertise either onsite or remotely to:

 

• • Undertake gap analysis, data risk assessment, and scope of what your business requires
  • Provide online training courses using our learning management system
  • Assist you in creating operational policies and procedures using our template pack
  • Support you through data and process mapping so you Know Your Data.
  • Understand your consent requirements
  • Guide you through technology solutions to ease the compliance burden
  • Provide regular project updates with our project tracker

We also work within your budget and available resources.  So, if you have staff who have the time to assist and learn about data protection compliance, then we guide them through the process.  If not, we can undertake the analysis and assessment work ourselves.

 

We will also engage with your team at various points to answer questions, review documents and agree on solutions.  It is our role to help you make the best decisions for your business needs.

 

At the end of the project, you will have a set of valuable artefacts that you can reuse for your business. You will also have trained staff and informed customers and suppliers.  Leaving you to focus on running your business.

 

Compliant? Now what?

Put your feet up and relax?  Not quite.

 

Data protection compliance is an ongoing operational requirement for businesses. It does not end on a specific date.  So, it must be built into the day-to-day running of your business.

You need to have someone in your organisation responsible for Data Protection compliance – even if your company is not legally required to have a Data Protection Officer on staff.

 

We can assist with your ongoing operational needs by providing services that give you access to Data Protection guidance and information when you need it.

 

• Data Protection Officer

This is an outsourced service designed for organisations who are obliged to have a DPO.

• Annual Audits and Advice

This service is designed for organisations who are not legally obliged to have a DPO.   However, your company may operate with high data risk or be vulnerable to reputational risks. In these cases, businesses still need access to data protection support and information.

• EU Representatives for overseas companies (ex-EEA)

This service is designed for companies located outside the EEA, and who offer goods and services into the EU.  The data protection compliance means these companies need to have an EU based representative.

 

 

---

Collaboration with the wider community

We are members of the International Association of Privacy Professionals, Data Protection Forum, Information & Records Management Society and the National Association of Data Protection Officers.

 

As community members, we attend industry events arranged by the ICO and World Data Protection Forum and are proud to be engaged with the Data Engineering and AI communities working together with them to build privacy solutions into our digital and AI futures.

 

Through our network of  partners and associated specialist companies we can then offer our clients:

• Legal advice on GDPR –revision of contracts and HR requirements.
• Technology companies providing software solutions for compliance.
• Specialist sector partners to build online training courses for medical practices, clubs, tech start-ups.
• IT Security & Cyber Security protection.
• Insurance protection for GDPR against Data & Cyber Breaches.

 

We are small enough to care yet big enough to offer a wealth of knowledge and solutions to our clients.

 

FOR UNCOMPLICATED GUIDANCE AND SUPPORT, CONTACT US!

 

On 25^th May 2018, the EU General Data Protection Regulation came into force across the European Union.  The regulations brought into law tougher standards for the protection of personal data.  They specifically apply to organisations who offer goods and services to EU residents and citizens.  

 

In the UK, the Data Protection Act 2018 came into force on 25^th May 2018 which replaced the Data Protection Act 1998 and broadly adopted the GDPR framework.

 

The Privacy and Electronic Communications Regulations (PECR) and the e-Privacy Directive in the EU govern digital communications.  They apply to businesses, limited companies, partnerships, sole traders, sports clubs and charities who process personal data. 

 

Be Data SMART. Be Compliant.

Data Protection is here to stay.