A Structured Approach

Every business or organisation collects personal data in some form. Each business is unique in the amount of data they collect and how they collect it. There is no one-size-fits-all solution for data protection. We bring a structured approach to delivering data protection services in a flexible way that is designed to suit your needs.

Privacy by Design

Embedding customer trust from the outset

Outsourced DPO

Proactively driving and monitoring data protection compliance

Data Catalogue

Building a solid foundation for your policies, processes and legal agreements

Audit and Assessment

Independent verification of your approach

Training

Because data protection is everyone's responsibility

Bespoke Services

Because one size doesn't fit all needs

Our Posts

Legitimate Interests under the GDPR – Handle with Care!

Many entities are hoping to rely on “legitimate interests” as a legal ground for the processing of personal data. However, while legitimate interests may well be the most flexible ground for processing personal data, it’s not necessarily the easiest.

GDPR Preparation for your Legacy Data

Figuring out what to do about legacy data is one of the big challenges facing businesses preparing for the GDPR. Legacy data is data that a business processes now, under the existing data protection rules. These rules will change under the GDPR which sets new standards for processing data...

5 Reasons why GDPR is not Y2K

I have heard GDPR compared to Y2K a couple of times this week. Mostly by people who don’t remember Y2K and who also don’t really understand GDPR. I am (sadly) old enough to have been there for Y2K and (happily) have developed a pretty good understanding of the operational impacts of GDPR.

Out with the old and in with the new – privacy notices under the GDPR

Most companies have some form of privacy notice on their website. To date, they have been deployed “en masse” and for the most part without any real thought to address the main focus of a privacy notice – to detail the personal data processing activities of the organisation...