How Data Protection Consultancy Helped an Air Ambulance Charity Innovate and Save Lives

Our data protection consultancy was ideal for Rebecca and KSS. We were contracted for one day a month of consultancy, delivered by our head of privacy consultancy, Louise Brooks. KSS needed help in various areas including articulating its legal basis for processing, understanding its duty of confidentiality in a medical context and negotiating data sharing agreements. However, over time, Louise has helped move the charity’s strategy forward by ensuring each goal is defined by specific actions that need to be completed, allowing KSS to progress more efficiently. She has also advised on engaging a prospecting agency to help KSS with ambitious fundraising targets. This was initially seen as somewhat divisive data protection-wise, but a thorough review suggested that doing so would actually result in less risk than if KSS itself were to prospect.

Now, three years into the partnership, Louise’s work has had a direct impact on saving patients’ lives. She has enabled KSS to thoughtfully review (not fear) innovative ideas. This has allowed its Research and Innovation team to look into new life-saving technology, such as taking part in a multi-agency trial that involved live streaming at the scene of an incident directly to dispatchers to aid decision-making when every second counts; drone-delivered defibrillators; and setting up a robust system for the team to manage projects.

“All of this work has had to be so carefully thought through, it would be so easy to think ‘it’s too complicated, we can’t do it’. Working with Louise has been enabling.”

– Rebecca Kenny, Head of Governance and Compliance

Rebecca and Louise’s working relationship has been “confidence building” for KSS. Innovative ideas previously thought to be too risky are now in the works thanks to careful consideration and application of the law. It has enabled continual improvement of KSS’s data protection compliance, and supported positive outcomes for patients both at the time of their incident and in sharing their story afterwards.

“We spent that [initial] year really getting to understand the space we’re working in, building a framework for data security that enables us to be trusted by other organisations. We’re an organisation that people want to partner with.”

– Rebecca Kenny, Head of Governance and Compliance

Data Protection Consultancy is designed to support any data protection-related projects and the ongoing running of your data protection compliance. You’ll be in control of how much support you need, whether it’s just an extra pair of eyes or full project management.

• Data retention business strategy, reviews and policy implementation
• Third-party due diligence reviews
• DPIA (data protection impact assessment) process creation and completion of assessments
• Review or creation of data breach policies and processes
• Data mapping of data collection activities and set-up of Article 30 records
• Policy and documentation review
• Implementation of privacy software
• Implementation of new policies and procedures with practical assistance and training workshop

Find out more about data protection consultancy