The Compliance Consultancy – services

All services include document templates relevant to the service provided

 

Privacy Notice – £100

Your website is your company’s online brochure, it’s accessible to all of your potential customers, so having a Privacy Notice it crucial. It’s essential that you provide your clients with transparent notification of how their personal data is managed. It is required by Data Protection Law, but also helps you to establish credibility and build trust with potential clients. Remember, there is no such thing as a bespoke one-size-fits-all privacy notice.

Staff Privacy Notice – £100

All businesses are required by law to inform staff of how you manage their personal data. Not having a staff privacy notice is not an option, it not only will it leave  your business exposed in the event of disaffected staff or disgruntled ex-employees, but it’s also a part of your business’s larger corporate social responsibility (CSR) effort.

Website Analysis- £200

Are you asking for consent on your website? Does it have the correct security? How do you handle cookies? Is your privacy notice up to date? Are you using staff photos? Are you using client endorsements? These are just some of the questions our web analysis will answer. It will give you a clear insight into how compliant your website it, allowing you to build robust and sustainable credibility for your brand.

Data Protection Policy – £200

This package provides you with consultancy and a provision of the data protection policy template with advice on how to amend. The document is an internal one, although it can be amended to create a public version to be used as part of your new business collateral and in response to Processor questionnaires/due diligence.

SME solution – £750

Our SME solution is perfect for smaller businesses who want to be fully compliant, but also have a tight budget. It includes:

• A basic SME audit
• Privacy Notice
• Website Analysis
• Data Protection Policy
• Breach Policy
• SAR (Subject Access Request) Policy
• IT overview
• Vendor Management

SME audit – £ 250

Our SME audit will provide you with an overview of GDPR requirements of your business. It also includes a Data Protection Policy template, allowing you to set out how your organisation protects personal data with ease and aligning you with GDPR standards.

Staff Training – £ 200 (typically 2/3 hours) – max 10 people

Training your staff to understand compliance is essential. It gives an extra level of protection to your business and its customers and gives you more certifiable evidence of your brand’s credibility.

• It is required by Data Protection Law and is one of the first questions the ICO will ask if they investigate
• The training is designed to meet guidance provided with content and delivery to engage staff
• The training presentation can also be provided should line managers want to deliver on to their staff

Have ISO 27001 and wonder what more you need to be aligned with GDPR compliance? – £500

Got some aspects of your compliance covered but missing in other areas? Our ISO 27001 solution could be right for your business. It does not cover all aspects in relation to the UK’s data protection law. However, the solution includes consultancy and the relevant document templates to align yourselves with GDPR, giving your business the protection it needs.

IT alignment – £ 1,500

Are you managing risk with your IT partners or you ITdepartment? There are many aspects within Information Security that apply to GDPR. Our IT alignment solution includes an IT audit, provision of the relevant policy templates (up to 11 documents) and liaising with IT partners (or your internal IT department).

Vendor Liaison – £500

For our vendor liaison solution, we provide you with the assurance that every aspect of your business is covered. We liaise with HR, IT Support, Website design and CCTV. With this solution, we are able to bring multiple of your business’s services up to GDPR standards.

DPIA’s – £ price on application

Are you planning to change or implement an internal system? Does that system carry a risk to the rights and freedoms of its data subjects? If this is the case, you will need a Data Protection Impact Assessment to manage that risk and reduce exposure to both you and your clients. This activity is required by Data Protection Law in specific circumstances.

Full GDPR audit / Gap Analysis – typically half a day £500

Our full GDPR audit is perfect if you want to tackle every aspect of your compliance head-on. It identifies what actions are required to align your business with GDPR. You can add an additional Gap Analysis Report for £500, so you have a clear insight into where your company stands with its GDPR and know what steps to take to reach your goal.

NB: none of the above services fully aligns you with GDPR, they are designed to utilise Risk Management and Data Protection methods and consultancy to reduce the risks of a breach.

 

Virtual DPO – price on application

Our Virtual DPO solution enables you to increase your GDPR compliance with two options:

• Option 1 – to implement a full GDPR project, ideally working with a data protection lead within the business. This initial project can be followed up with VDPO services in line with the second option
• Option 2 – for companies who have been through a GDPR project, this option provides support and response for data protection related issues including, but not restricted to;
  • Breach response
  • Staff training
  • SAR responses
  • On-going support as and when new advice is released by the ICO or the European Data Protection Board or when there is new case law
  • Annual Audit

GDPR Project – price on application

For our GDPR Project, we will work with a data protection lead within your business. We go through all stages of an alignment program, including:

• GDPR audit
• Information Audit
• Risk Assessments
• Staff Training
• All document templates
• Data Mapping
• Liaising with existing Vendors (i.e. IT/HR/CCTV etc)
• Data Protection Impact Assessments (where applicable)
• Special Category (sensitive) Data Management
• Processor management
• Further details available on application