make your business gdpr compliant

the uk general data protection regulation (uk gdpr) and the data protection act 2018 together form the bedrock of uk data protection legislation. they impose a set of requirements on businesses that process (ie obtain, record, store, organise or otherwise use) personal data (ie information about somebody from which they could be identified). 

these requirements ensure that businesses process personal data in a fair, safe and transparent manner which does not infringe on individuals’ data protection rights.

complying with data protection law involves multiple steps including implementing various policies and procedures for processing personal data. you should set out these policies and procedures in comprehensive documents such as: 

• a data protection and data security policy

• an employee privacy notice

some data processing activities require you to create other documents too, such as:

• a data processing agreement (dpa), if you outsource data processing to another business (or if you process data for another business) 

• a data protection impact assessment (dpia), if you process data in a way which is likely to result in a high risk to the rights and freedoms of individuals

for more information on documents and practices you should consider to ensure compliance, read the gdpr compliance checklist.

a data protection health check is a systematic evaluation of your business’ current data protection practices carried out by a compliance specialist. when you undergo a check, the compliance specialist:

• identifies what your business needs to do to comply with data protection law

• evaluates the documents you currently have in place to see if they meet your data protection needs, and 

• makes recommendations for your next steps towards compliance

the health check includes analysis of your practices and documents for international transfers of personal data.

the cost of these services can vary depending on the complexity, scope and adequacy of your business’ data processing practices.

you can contact us to discuss prices for a comprehensive service for your business which combines a data protection health check and the creation of data protection documents.