GDPR for Small Businesses


Customer testimonials
Lorem ipsum dolor sit amet, consectetur adipiscing elit.
Name Surname
Position, Company name
Name Surname
Position, Company name
Name Surname
Position, Company name
FAQs
Some of the commonly asked and answered questions below. To see how we can specifically help your business please contact us using one of the methods below.
The General Data Protection Regulation (GDPR or UK GDPR in the post-Brexit context), together with the Data Protection Act 2018, are the strictest data protection regulations in the world. They were created to protect the personal data of individuals against the unlawful use of personal data by organisations of all sizes. The UK GDPR and the DPA 2018 both set high standards and numerous requirements for companies to follow, such as designing a comprehensive data protection programme and implementing a suite of data protection measures throughout all business functions.
There is a myriad of services an outsourced Data Protection Officer can provide to you such as:- strategic advice and guidance on the data protection strategy- implementation support of data protection measures- support for events such as personal data breaches and subject access requests- monitoring data protection compliance- liaison with regulators- data protection effectiveness reporting- working with your managers and IT team to maximise data security
Your data protection and privacy work will be managed by a Data Protection Consultant, qualified with the IAPP, the world's leading training and certification body for Data Protection Officers. Your consultant's work is supervised by a Privacy Director, with at least 10 years' experience within regulatory compliance. Occasionally, for highly-complex cases, you may need further assistance from a lawyer, legal consultant, or both. In which case we will draw upon the resources of our in-house legal team and international privacy lawyers.
The answer is: 'Sometimes you must - but if not, you should.' The data protection legislation prescribes three categories of personal data processing under which your organisation is legally obligated to have a Data Protection Officer. However, even if these criteria are not met, the ICO still expects an organisation to have a Data Protection Officer, which is the 'should'. The burden is on an organisation to argue why it should not have a Data Protection Officer, which can of course lead to difficult regulatory dealings if things have gone wrong and a Data Protection Officer is not in place.
The outsourced Data Protection Officer as a Service provides you with a virtual, on-demand data protection specialist at a fraction of the cost of having employing someone to do the role. The Data Protection Officer (DPO) is an independent specialist – often outsourced - who has necessary knowledge and expertise about Data Protection regulations and is responsible for assisting you to monitor internal compliance, inform and advise on your data protection obligations, provide advice regarding data protection assessments - and act as a contact point for data subjects and the Information Commissioner’s Office (ICO).
Our services are around 15% the cost of hiring a junior in-house resource. On average our clients save £56,000 a year on payroll costs alone. Using our outsourced Data Protection Officer as a Service means your organisation is not having to fund holiday pay, absences, training, benefits or pensions. Not only does having in-house resource lose many hours a week to internal meetings, emails and many other time drains, you will have to pay for the data protection tools, systems and ongoing training for a DPO. Our costs are spread across a large client-base so you are never burdened with all these costs. Budgeting is very simple. Our Data Protection Officer as a Service is provided on a simple monthly fee. Our one-off services are costed on a fixed price or a transparent hourly fee. We make it as simple as possible for clients to manage their budgets and save tens of thousands a year of cost. Contact us to obtain a free initial consultation and a tailored quote. This will enable us to analyse your company’s needs, plan our deliverables and accommodate our work within your deadlines and budget.
No, since we are not a regulated law firm, and our work is kept within the boundaries of Data Protection Consultancy. We do not need to be as we do not directly carry out any of the services that are 'reserved' for law firms. This has been clear in UK law since 2007. Reserved activities are the right to work in court, carry out litigation, conveyancing, notary duties, probate or taking oaths. If your business requires any of these then our partner law firm can undertake these for you instead. By being independent of the regulations we can focus more creatively on meeting your legal needs, at a price point that our clients love.
Micro, small, and medium sized businesses benefit from having an outsourced Data Protection Officer or using our one-off data protection services. We also work with the the legal and compliance departments of many bigger companies and global brands to augment their internal data protection resources
Discuss your data protection requirements with us
Book a free consultant with one of data protection consultants or contact our support team.
