Data Protection Consulting
Keeping you on the right side of Data Protection law
The Data Protection Act 2018 created new and complex requirements for companies processing the personal data of their staff and their customers. New legislation such as the Data (Use and Access) Act 2025 (DUAA) has introduced additional requirements affecting all businesses. What’s more, Data Protection legislation from other countries including Japan, Dubai and China may affect how you treat personal data if you trade internationally.
We deliver compliance services to meet the complex requirements of Data Protection legislation, ensuring you avoid financial penalties from the Information Commissioner’s Office and the reputational damage of customers’ lack of trust in how you process their Personal Data.
Data Protection Assessments
In our three-stage process, we first get under the hood of your business, checking your IT infrastructure and your processes for managing Personal Data. This delivers a confidential, detailed report on your compliance rating under current Data Protection law. Our report also gives you the third stage: our recommendations, fully tailored to your business, to improve your compliance level immediately – and over time.
Data Protection compliance
We deliver the critical work you need to ensure compliance with existing and forthcoming Data Protection legislation. We have experience in delivering staff training, creating new processes and designing contractual agreements. Whatever we deliver, we promise to put you at the heart of our work, with a bespoke service not a ‘boiler plate’ copy from elsewhere.
Virtual Data Protection Officer
For DPO support without the cost of a full-time hire, our Virtual DPO (vDPO) service ensures you pay only for the time you need. We handle all standard DPO duties, including attending management meetings, risk reports, and ad hoc queries, offering you a flexible and cost-effective solution.
Foreign Data Protection Services
Countries such as Japan, Dubai, Brazil and China have their own laws to protect their citizens’ Personal Data – so if you have overseas clients, you need to consider compliance with their laws too. We understand the obligations of foreign Data Protection legislation – from Dubai’s Federal Decree Law No. 45 to Japan’s APPI. We help you manage the risks you face when trading overseas.
Records of Processing Activities
UK law may require your company to create Records of Processing Activities (ROPA), detailing how Personal Data is handled. ROPA support transparency for your customers, but production can be challenging. We’re experienced with ROPA across a range of sectors and can help your business too.
