Data Protection Consultancy

You will sometimes come across data protection issues that require more support than a helpdesk can provide. For example, you want to conduct a detailed audit of your performance, assess an initiative for it’s impact on data protection risk, or investigate after an incident or complaint. As well as the amount of time involved, these tasks demand a deeper understanding of data protection practice. We can support you through a tailored data protection consultancy project.

Your project may have a broad remit, but we are specialists in the processing of personal data. We have a lot of experience working with senior leaders in organisations to integrate our work into the rest of the project, including providing regular updates.

It’s important that we both have a clear understanding of the results that the data protection consultancy project will deliver. We will both sign-off a schedule of work.

Benefits (of Edtech) are not discernible or not in children’s best interests

Digital Futures Commission (2022)

Data Protection Consultancy – When you need specialist support

Investigate
Independent Review
When you need to understand what happened and why
Implement
New Initiatives
Support for risk assessments and DPIAs

Implement
Inspect
Progress Checking
How well are you doing and where could you do better?

It’s important that we both have a clear understanding of the results that the data protection consultancy project will deliver. We will both sign-off a schedule of work.

Find out how our helpdesk coud support you

Data Protection Consultancy Services

Investigations

Sometime things don’t work out the way that we like them to. You have to work to mitigate the impacts, but the organisation has to learn from the experience and use that learning to reduce the risk of recurrence. You may have to report on how an incident occurred and pass that report to an external organisations, including the Information Commissioner’s Office.

Data Protection Team can provide invaluable support in this situation. We can see both the data controller’s and the data subject’s points of views. Furthermore, we are independent so can be relied upon to give balanced view of the strengths and weaknesses that have been revealed. In addition, we will always offer suggestions to help mitigate the chances of the issue being repeated.

Implementation

Data controllers experience a great deal of confusion over Data Protection Impact Assessments, or DPIAs. These are big pieces of work, requiring input from data controllers, third parties and sometimes data subjects. A DPIA is only required when an initative is likely to create a significant change in the risks to the rights and freedoms of individuals. This usually means a completely new use of personal data, the change of a major data processing system, or a significant increase in the intensity of the use of personal data. A radical increase in the use of CCTV is likely to trigger a DPIA.

Our helpdesk can help you determine if a DPIA is necessary. Beyond this decision, there is a major project to conduct. We can help you to set up the structure of the project and identify participants. Furthermore, we can conduct a risk analysis for you and help to identify mitigations for those risks.

It’s important to understand at what point in an initiative a DPIA should be conducted. It’s much earlier in the process of developments so that data protection can form part of decision making. Many DPIAs are conducted once purchasing decisions have been made. If you leave the DPIA to this point you can benefit from the risk review, but you must be willing to respond to the risks

Auditor works in office with data. Data Protection Consultancy

Auditing and Reporting

You must be able to demonstrate that you are managing data protection in line with the legislation. Some of this comes from having the right policies and proceedures in place, but that isn’t enough. You need to understand how well the organisation is performing in practical terms. Are staff knowledgeable about data protection? Is information left in the open, or are computers left unlocked? What measures protect your IT infrastructure?

You can get this feedback by conducting a set of audits. The audit is focused on practical operations. These observations are then pulled together into a report with recommendations for improvements.

Click here to add your own text

WordPress Cookie Notice by Real Cookie Banner

Benefits (of Edtech) are not discernible or not in children’s best interests

Data Protection Consultancy – When you need specialist support

Investigate

Independent Review

Implement

New Initiatives

Implement

Inspect

Progress Checking

Data Protection Consultancy Services

Investigations

Implementation

Auditing and Reporting

Legal

Navigation

Categories