Data Protection

Tailored policies and staff handbooks, kept up to date, all included.

The UK GDPR, the Data Use and Access Act, and emerging guidance on A.I. and automated decision-making all place real expectations on organisations of every size. Very few organisations have the appropriate measures in place to demonstrate compliance across these areas.

We create tailored data protection policies for your organisation, keep them current as legislation changes, and provide clear one-page guidance notes your staff can actually understand, significantly more readable than a 30-page policy document.

When a prospective customer asks for evidence of your data handling practices, you hand over a clear, easy-to-understand compliance pack that gives them every confidence you will handle their information correctly.

Show your customers that you are leading the way, not trailing behind.

What We Do

• Create tailored data protection policies with plain-English guidance notes
• Add I.T. policies covering acceptable use, bring your own device, data retention and remote working
• Monitor legislation changes and rewrite your policies when they need updating
• Review your website cookie compliance and public-facing privacy policy

Staff Training

Policies on paper are only half the job. Your staff are the people who handle personal data day to day, and they need to understand their responsibilities clearly enough to make the right call under pressure. We deliver short, engaging sessions on data protection that people actually remember, tailored to your sector and the kinds of data you handle. See our training programme.

A.I. and Automated Decision-Making

If your organisation uses A.I. tools, chatbots, automated profiling or algorithmic decision-making, you already have compliance obligations, and regulators are paying close attention.

We help you understand where A.I. intersects with your data protection duties, ensure your policies reflect how these tools are actually used, and put practical governance in place before a regulator or a client asks the question.