Data Protection

Personal data is one of the most important elements of any organisation. Without personal data an organisation cannot function.

We help you comply with GDPR and Data Protection Legislation and  reduce exposure to risk whilst at the same time ensuring you can use the personal data to grow your organisation.

We will not tie you up in red tape, but show you how to grow your organisation and at the same time be compliant.

Data Protection Officers (DPO) are an expense on an organisation, good ones are difficult to find and often an organisation does not need an in-house or full time appointment. If an organisation has a DPO, what happens when they are ill, or on extended leave?

Combining our unique skills from a legal, commercial and marketing background we can act as an external DPO.

Acting as an external Data Protection Officer

We have extensive experience acting as external DPO for a wide range of organisations in many sectors. We provide advice and assistance on all aspects of data protection.

We will also provide assistance to an internal compliance officer or data lead if an organisation is not required to appoint a DPO but wants the peace of mind of professional back up.

Temporary cover can be provided for long term sickness, maternity leave, or the gap between in-house appointments.

We provide unlimited access to an advice line by phone and email. The telephone advice line operates Monday to Friday from 8.00am to 6.00pm. The caller can access bespoke and detailed advice about any data protection issue.

Drafting Documentation

Many organisations require data protection policies and procedures. As your DPO we will draft everything you need including,

• Data sharing agreements to let you share information with other organisations
• Policies to support your marketing strategy
• Processor agreements when you outsource
• Agreements to allow you to transfer data outside of the UK
• Demystifying DPIAs

We bring:

• Extensive commercial experience of guiding an organisation through regulatory change (public or private sector)
• A thorough understanding of data protection and its practical application
• Ability to advise on legal matters relating to the Regulations
• Significant practical experience of reviewing business policies and processes
• Excellent verbal and written communication skills and the ability to interact professionally with diverse groups at different levels within the organisation
• Excellent stakeholder management with an ability to establish and maintain a high degree of confidentiality, respect, trust and credibility
• Solutions to prevent data protection from restricting marketing activities

Training

All organisations need to ensure that appropriate training can be accessed. It is often difficult to find the right training at the right price.

We will discuss with you, your specific requirements and write a bespoke course for you.

We are experienced at delivering training by Zoom or Teams, or can travel to a venue arranged by you.

All our workshops use case studies relevant to your organisation. Topics include:

• GDPR and Data Protection –a practical approach to compliance
• Confidentiality – a comprehensive review of the rules of confidentiality against the backdrop of GDPR and the Human Rights Act.
• Caldicott Guardian – to enable both a newly appointed and experienced Caldicott Guardian to have a detailed understanding of the relevant law and how to apply the law to all types of situations.
• SIRO – sets out the role of the SIRO and how the SIRO can successfully ensure their organisation is able to plan for serious incidents and have the appropriate solutions in place.
• GDPR for the Human Resources Manager – how GDPR and the data protection affect employment contracts, recruitment, the requesting and giving of references, confidentiality agreements, retention of candidate’s data, destruction of data and disciplinary hearings.