Compliance audit
Team interviews, review of documents and process evidence, and prioritised findings.
Services / GDPR consulting
GDPR consulting & audits
Connect your documents to your actual processes. Understand where you stand and what comes next.
Discuss your project ↗Our approach
Work with a clear scope.
A GDPR audit compares personal data processing practices with applicable requirements. The result is a view of gaps and an action plan grounded in your risks and activities.
The scope and specific deliverables are agreed after an initial discussion and review of your activities.
What the work includes
Policies and documentation
Processing records, notices, retention rules and procedures for requests and incidents.
Contracts and suppliers
Clarification of roles, processing agreements and review of international transfers.
DPIAs and project advice
Impact assessments where high risk is likely and advice for specific projects.
FAQ
Answers to your questions
What do we receive after an audit?
The agreed output may include a report, findings register and prioritised action plan. Implementation is scoped separately.
When is a DPIA required?
Where processing is likely to result in a high risk to people’s rights and freedoms. The assessment takes place before processing, under Article 35 GDPR and the supervisory authority’s applicable lists.
Does the audit include technical testing?
The service described here is a legal and organisational review. Technical security testing is scoped separately where needed.
Let’s start with your question.
Tell us about your organisation, challenge or planned project. We will discuss an appropriate scope of work.
Discuss your project