GDPR Gap Analysis
Know exactly where you stand on GDPR compliance
An independent review of your compliance with the GDPR (General Data Protection Regulation) by one of our data protection specialists. Get a clear picture of your compliance gaps, plus a prioritised action plan you can start on straight away.
- 24,000+ privacy projects delivered
- 7,600 organisations supported worldwide
- 6,800+ professionals trained on the GDPR
- 4.4 rated excellent by 287 reviewers on Trustpilot
What you’ll get
An independent assessment you can act on and share with your board.
Your compliance gaps
Where your current privacy arrangements meet the GDPR and where they fall short.
Your priorities
The risks that matter most, ranked so you know what to tackle first.
A practical action plan
Clear recommendations that fit how your organisation works, not against it.
Evidence of accountability
An independent report that shows customers, partners and regulators you take data protection seriously.
The data protection specialists
Why choose GRC Solutions?
Our team includes experienced data protection practitioners, lawyers and barristers who keep up with changing regulations and case law. We turn legal requirements into practical, commercial advice.
privacy projects delivered
organisations supported worldwide
professionals trained on the GDPR
rated excellent on Trustpilot
How it works
Planning your assessment
We get to know your organisation and agree a plan and a date that suits you.
Interviews with key managers
A data protection specialist speaks with the people who handle personal data, on-site or remotely, including IT, privacy, operations, HR, marketing and finance.
Your gap analysis report
You receive an easy-to-follow report of the findings, with actions to fix any issues.
Talking it through
You go through the results with your specialist, so you know exactly what they mean and what to do next.
What your report includes
- An overview of the state and maturity of your privacy arrangements.
- A summary of the gaps between those arrangements and the requirements of the GDPR.
- An assessment across ten areas using our GDPR RADAR™ tool, from scope of compliance and data subject rights to data transfers and your DPO (data protection officer) arrangements.
- Prioritised recommendations, so you know where to focus first.
- Scope of compliance
- Roles, responsibilities and training
- Risk management
- Rights of the data subject
- Data transfers
- Privacy by design
- Privacy information management
- Information security management
- Governance
- Data protection officer (DPO)
Self-assessment or specialist review?
A self-assessment is a good place to start. A specialist review takes you further, with an expert’s judgement on how your organisation really handles personal data.
Self-assessment
Carried out by your own team
Findings based on your own answers
General recommendations
Limited proof for stakeholders
GRC Solutions specialist review
Carried out by an independent data protection specialist
Findings based on interviews and evidence from across the business
Recommendations prioritised and tailored to your organisation
An independent report you can share
Already used our GDPR Gap Analysis Tool? Your results give our specialist a head start.
Case study
How Canfield Scientific found a clear path to GDPR compliance
Canfield Scientific, a global leader in imaging systems for research and healthcare, holds large volumes of personal data, including sensitive health information. Our consultant reviewed its systems and interviewed key stakeholders to pinpoint where certain processing activities created risk.
- Stronger data protection clauses in contracts with service providers
- Revised consent forms for collecting customer health information
- Greater assurance for clients and a stronger competitive position
The consultant was extremely knowledgeable and helpful in working through various bits of the Regulation and its applicability to our business and working with the consultants was a pleasure. This analysis was extremely helpful in identifying weak points in our processes and has given our team a clear path to compliance.
One fixed price, no surprises
You’ll know the cost before we start. Prefer to pay by purchase order? You can apply for a corporate account or call our service centre team on +44 (0)333 800 7000.
Good to know
- The assessment can be on-site or remote, whichever suits your organisation.
- Timing depends on the size and complexity of your organisation. We’ll agree a timeline with you before we start.
- If your business is outside mainland UK (England, Scotland and Wales), additional expenses will be charged to cover our specialist’s travel for an on-site assessment.
GDPR Gap Analysis
Fixed price, agreed with you up front. Ask us for a quote for your organisation.
- Specialist interviews across your organisation
- Full gap analysis report with recommendations
- Prioritised action plan
- A follow-up call to talk through your results
GDPR gap analysis FAQs
How does a GDPR gap analysis help my organisation?
It shows where your privacy arrangements fall short of the GDPR, so you can fix risks and weaknesses before they become costly problems.
Who should book a GDPR gap analysis?
Any organisation that processes personal data in the UK or EU and wants to check its compliance, prepare for an audit or show customers it handles data responsibly.
Which laws do you assess against?
EU data protection law, UK data protection law, or both, depending on where you operate. That covers the EU GDPR, the UK GDPR and the Data Protection Act 2018.
Which areas does the gap analysis cover?
We use our GDPR RADAR tool to assess ten areas: scope of compliance; roles, responsibilities and training; risk management; rights of the data subject; data transfers; privacy by design; privacy information management; information security management; governance; and your DPO arrangements. It also shows whether any practices specific to your business increase your regulatory risk.
Is the assessment on-site or remote?
Either. Our specialist interviews your key managers in person or online. If your business is outside mainland UK (England, Scotland and Wales), we’ll charge additional expenses to cover travel for an on-site assessment.
How long does it take?
It depends on the size and complexity of your organisation. We’ll agree a timeline with you before we start.
How is this different from a self-assessment?
A self-assessment relies on your own answers. A specialist review gives you an independent view, based on interviews across the business, with recommendations tailored to how you work.
What happens after the gap analysis?
Your report sets out prioritised actions. If you’d like help putting them in place, our data privacy and GDPR compliance services can support you from there.
Speak to a data protection expert
Get free, practical advice on the gap analysis process from one of our data protection specialists. Tell us a little about your organisation and we’ll be in touch shortly.
- Free, practical advice on the gap analysis process
- A quote for your organisation
- Answers on scope, timings and next steps
Prefer to talk now? Call us on +44 (0)333 800 7000.