Outsourced, interim & part-time DPO / SRI
Direct access to a fully qualified GDPR Practitioner acting as your appointed Data Protection Officer or Senior Responsible Individual — without the cost of a full-time hire.
- Named DPO/SRI on your policies and ICO register
- Board-level reporting and quarterly compliance reviews
- Day-to-day advice on subject access, breaches, and processing decisions
DPIAs, audits & gap analyses
Structured assessments against UK GDPR, the Data Protection Act 2018 and the Data Use and Access Act 2025 (DUAA) — with pragmatic, prioritised remediation plans.
- Data Protection Impact Assessments for new products and processing
- Full compliance audits with an actionable risk register
- Article 30 records of processing activities (RoPA)
Privacy policies & documentation
Plain-English privacy notices, cookie policies, retention schedules and internal procedures — drafted to be legally sound and genuinely readable.
- Public-facing privacy and cookie notices
- Internal data protection policy suite
- Retention schedules and records management procedures
Staff & executive training
Engaging training sessions calibrated to your audience — from all-staff inductions to board-level briefings on the DUAA and regulatory risk.
- All-staff data protection awareness sessions
- Role-specific training for HR, marketing and product teams
- Board and executive briefings on regulatory change
Technical & Organisational Measures (TOMs)
Assistance producing and maintaining TOMs reports that stand up to procurement, insurance and regulatory scrutiny.
- Documented technical and organisational controls
- Third-party and processor due diligence
- Evidence packs for enterprise procurement questionnaires
Regulatory response
Specialist support for clients engaged with the ICO, Ofcom or the Advertising Standards Authority — particularly where formal complaints, investigations or enforcement actions have commenced.
- ICO complaint and investigation handling
- Ofcom and ASA regulatory correspondence
- Breach reporting, containment and stakeholder communications
Retained & project support
Ongoing retained advisory support, or time-boxed project delivery — whichever fits how you actually work.
- Monthly retainer with defined SLAs
- Fixed-scope project delivery
- Cover for maternity, sabbatical or interim gaps