GDPR assessment & data mapping
Review your data flows, systems and vendors; assess controller and processor roles, legal bases and gaps; build a prioritised compliance plan.
02 / PRIVACY & DPO
Data rights.
Practical governance.
GDPR advice for products and organisations that collect, use or share personal data across borders.
Discuss this service ↗
HOW WE CAN HELP
Legal advice
& deliverables.
Records & internal governance
Prepare or update records of processing activities (RoPA), retention schedules, internal privacy policies and procedures for individual rights requests.
Privacy notices & product journeys
Draft website, app, workforce and customer privacy notices. Review consent journeys, cookies, analytics and marketing practices against the rules applicable to your business.
Data processing & international transfers
Draft and negotiate data processing agreements, assess subprocessors and international transfers, and support appropriate safeguards, including standard contractual clauses and transfer impact assessments where relevant.
Impact assessments & incident readiness
Support data protection impact assessments (DPIAs), privacy by design, breach response procedures and decisions on notification obligations.
External DPO & ongoing advice
Provide an agreed monthly DPO service where an independent appointment is appropriate, or ongoing privacy advice where a formal DPO appointment is not needed. Support monitoring, team guidance and regulatory liaison within the agreed mandate.
FOCUSED ENGAGEMENTS
Examples of service packages.
Privacy foundations
Data mapping, a gap assessment and a prioritised set of core privacy documents.
Discuss the scope ↗Product or transfer review
A defined review of a launch, vendor arrangement, international transfer or sensitive processing activity.
Discuss the scope ↗Monthly DPO / privacy counsel
Ongoing advice and monitoring with an agreed reporting schedule and scope.
Discuss the scope ↗DPO appointments are assessed for independence, conflicts of interest and the organisation’s needs. Scope, deliverables and fees are agreed individually before work begins.
WORK WITH THE PRACTICE
Bring the legal question
into focus.
Describe the asset, product or decision you need help with. The first step is to agree what advice is needed and its scope.
Contact Christina ↗