Expert Data Privacy Solutions and GDPR Support

Data Protection Act compliance is interconnected with UK GDPR compliance.

As such, you must comply with the Data Protection Act if your organisation processes personal data and is based in the UK, and when processing personal data of people in the UK, regardless of where your organisation is based.

The GDPR provides the baseline for data protection requirements, whereas the Data Protection Act applies these standards to UK law and provides additional rules and clarifications.

Anyone whose job involves processing personal data is required by law to undergo appropriate training.

According to the GDPR, controllers and processors must designate a DPO in three specific situations:

• When the processing is carried out by a public authority or body
• When core activities require regular and systematic monitoring of data subjects on a large scale
• When core activities involve large-scale processing of special categories of data or personal data relating to criminal convictions and offenses

Organisations that are subject to the EU GDPR can use Europrivacy to formally certify that their data processing activities comply with data protection law.

Under the UK GDPR, the Information Commissioner’s Office has approved several certification schemes, which validate compliance with specific data protection activities rather than the entire organisation and its GDPR compliance practices.

In both cases, certification is voluntary. It builds trust and provides assurances that you are following best practice, but regulators do not require you certify to prove that you are compliant.

Organisations can use ISO 27001 (information security management) and ISO 27701 (privacy management) to support their data protection practices. These standards are especially useful when implementing technical and organisational controls to protect personal data, and when managing data subject rights.

Following these frameworks will give you a solid foundation for data protection, but they do not cover your full GDPR requirements.

We will do our best to work within your timelines according to the urgency of the project (such as DSARs), often within 24 hours after the contract is signed.

You’ll have two contacts – your salesperson and your consultant (if applicable), ensuring you can get the information you need throughout the engagement.

We can support you regardless of the amount of help needed. Our solutions are designed to help everyone, from customers wanting to achieve GDPR compliance independently through to those who need a fully managed service. Each quote is tailored to your specfiications.