Services — UK GDPR, Data Protection & Information Security

Privacy

UK GDPR consultancy

Whether you're starting from a blank page or responding to an ICO enquiry, we build privacy programmes that fit how your organisation actually operates.

Discuss this service

—Records of Processing Activities (Article 30)
—Data Protection Impact Assessments
—Lawful basis & legitimate interests assessments
—Privacy notices and cookie compliance (PECR)
—Data subject rights handling and uplift
—Personal data breach response and ICO liaison

Cross-border

Non-UK regulatory guidance

If you process data outside the UK, the rules multiply quickly. We translate EU, US and APAC requirements into something workable.

Discuss this service

—EU GDPR (including EU Representative service)
—International data transfers (IDTA, SCCs, TIAs)
—US state privacy laws (CCPA/CPRA, Colorado, Virginia, etc.)
—Expertise with South Africa regulations (POPIA)
—APAC regulations (PDPA, DPDPA)

Ongoing

Outsourced DPO services

A senior, named Data Protection Officer for organisations that need one — without the cost of an in-house hire.

Discuss this service

—Statutory DPO duties (Article 39)
—Quarterly board / SLT privacy reports
—Staff training and tabletop breach exercises
—Defined response SLAs and out-of-hours cover
—ICO registration and annual fee management

Information security

ISO 27001 planning & implementation

From the first risk register to your UKAS certificate — a structured programme that doesn't disappear after audit week.

Discuss this service

—Scoping and gap analysis against ISO 27001:2022
—ISMS build: policies, Statement of Applicability, risk treatment
—Annex A control implementation with engineering teams
—Internal audit and management review
—Stage 1 and Stage 2 audit support

AI governance

ISO 42001 planning & implementation

The new international standard for AI Management Systems. We help organisations build governance that keeps pace with model deployment.

Discuss this service

—AI inventory and risk classification
—AIMS design aligned to ISO/IEC 42001:2023
—Model lifecycle, evaluation and monitoring controls
—Third-party model and supplier due diligence
—Alignment with the EU AI Act and UK AI principles

Proven expertise. Defined scopes. Real outcomes.