Services

Three engagement modes, supported by senior practitioners.

Senior judgement, without a senior salary. You pay for the time the work needs, not a full-time hire.

Retainer

Fractional DPO retainer

Ongoing privacy leadership for organisations that need DPO coverage and independent senior judgement on demand. Suitable as the named DPO under UK and EU GDPR Art. 37 or as a parallel advisor to an in-house DPO.

Ongoing support through the retainer includes:

  • Being there when adverse events such as a data breach happen, with someone in your team who has handled them many times before. In a crisis, that experience is invaluable and helps keep things calm.
  • Customer and stakeholder engagement, at the moments when having an experienced, independent DPO in your team is a differentiator.
  • Day-to-day guidance, where experience helps your operational privacy team achieve better outcomes.
A man checking his phone beside a red telephone box on a rainy London streetAI-generated image

Project basis

Point-solution advisory

For discrete pieces of senior work. AI-assisted drafting speeds up the first pass; senior judgement is applied to the parts that determine defensibility.

Three colleagues laughing togetherAI-generated image

  • Privacy governance and framework advisory

    • Evaluate existing privacy governance and accountability arrangements, and advise on a structure and framework to manage operational privacy
    • Advise on and develop an AI ethics and control framework

  • Privacy risk management

    • Support with developing a privacy impact assessment process, including automation
    • Conduct privacy gap assessments and prioritised remediation roadmaps, based on your adopted framework or on external attestation reports and certifications (SOC 2 and ISO/IEC 27701)
    • Provide outsourced support for day-to-day privacy operations

    Proud partner of

    Dastra

  • DSAR advisory

    • Assess existing processes, and advise on and design internal DSAR processes
    • Support automation where large volumes of DSARs justify an in-house redaction capability

    Proud partner of

    PhaselawFacit

  • Training

    • Privacy awareness training for staff and specialist teams
    • Specialist training on key topics, including breach management, DSAR management and privacy risk management
    • As a highly specialised offering, privacy capability development is provided through our sister company, Vula Capability Systems.

    Our sister company

Review basis

Periodic reviews and audits

Independent senior eyes on your privacy programme at the points that matter, without a full fractional DPO commitment. Reviews are run with audit discipline: an agreed scope, findings backed by evidence and rated by risk, and a report you can take to your board.

  • Independent reviews of privacy programmes and compliance initiatives
  • Compliance readiness assessments
A young man studying his computer screen at a desk, with a vase of proteas behind himAI-generated image

Received a subject access request?

Our managed DSAR service handles it, at published prices: £1,500 + VAT for a standard request, with complex requests capped at £5,000 + VAT.

Visit Just DSARS

Start with a conversation.

A 30-minute conversation about your operating model and risk profile. No obligation.

Book a discovery call