Driven by the findings in the Gap Analysis you will develop the necessary systems, documentation, processes and controls required to allow GDPR compliance to become part of your day to day business. This will include the development of training and awareness programs, definition of organisational roles and responsibilities, communication mechanisms for data subjects who may request information about their data and the the development of records necessary to demonstrate legal compliance.

We can provide the consultancy necessary to successfully manage this project, and provide proven methods and techniques to help you achieve your goals much quicker.

Following the implementation of the necessary systems and controls, ongoing maintenance activities will need to be conducted to maintain their health and relevance. This includes review and audit activities, incident management, monitoring new and emerging threats or new legislation and adapting the business to meet them, change management and dealing with any contact with Data Subjects or Supervisory authorities.

GDPR compliance is not something that you do once and it stays done. The environment inside and outside of every organisation is constantly moving and changing and so a compliant system will need to constantly adapt and change to meet new demands. For some organisations this can develop into a specific function within their business, for others it may only require a part time commitment.

Where resource allocation is a problem, we can provide support services that range from annual audits and assessments, to full Data Protection Officer (DPO) Services. For more information on our DPO Services, please check out our DPO Services Page.