Personal Data Risk Management

You're covered

If, despite following the advice, damages or other awards are found against you - we will help protect your organisation from the financial impacts.

Peace of mind

Dept679 will help you put appropriate protection in place so you can be confident you are protected.

No distractions

Personal data probably isn't your business! It's a distraction from the core activities you need to perform. Dept679 takes away the distraction so you can concentrate on what you do best.

Survey

Our consultants will need to talk about personal data relating to Clients and Prospects, HR, Warranties, Complaints, Investors – indeed, anywhere personal data is used. The processes and procedures will be explored, and understood so “gaps” in compliance can be discovered.

Advice

The follow-up report will provide concrete advice about changes to reduce the likelihood of a compliance problem, and to minimise the impact on both the data subjects, and the organisation. The advice will provide new or improved clauses to include in your policies and procedures. We will not simply tell you to ask your solicitor to create one.

Training

For staff who handle personal data, or might interact with clients or members of the public – the processes are likely to change to embrace the new rules and it’s important they have an appreciation of the changes, and also understand why the processes are so important.

Induction

You will have ongoing access to on-line training material for new staff that explains the importance of data protection, and provides a certificate to demonstrate they have been trained, understand the issues, and have passed a test.

Helpline

FREE access to our experts for telephone advice if you have new projects or ideas and you want to check your Data Protection thinking.

Updates

Our monthly newsletter will help you stay on top of data protection issues as case-law evolves. Wherever the case-law has a specific relevance to the way you handle data, we will provide new guidance incorporating the new wisdom.

Cyber Security

Advice to help you achieve the nationally recognised Cyber Essentials PLUS certification, which lowers your risk, and importantly demonstrates you have taken steps to lower the risk.

Fact: Most ICO fines up to 2016 are for failures in security.

Review

An annual review to check that everything is working for you, and you have not drifted away from good GDPR practice.

Dept679 will check your policies and procedures are in line with the law as it has developed over the last year, and offer up-to-date advice about how to address any challenges discovered.

Documentation

Using the knowledge gained during the survey, we will provide you with the Register of Data Processing, which is required by GDPR as well as evidence of your Training and Induction processes, Policies and contract terms. All designed to be able to demonstrate at “Evidence Quality” what you do, and why you do it, and importantly that Data Protection is treated as a serious issue.

Breach Detection

Our Breach Detection service enables you to know if & when your data has escaped into the wild, whether that is because you have been hacked or because a rogue member of staff has stolen it. The detection provides “Evidence Quality” proof of where the data came from to support you in taking legal action if needed.

Breach Notification

If there is a data breach, you may be obliged to inform the Information Commissioners Office, and possibly all the data subjects involved. If you become aware of a breach, contact an expert immediately to assess the appropriate course of action.