Privacy & data protection

Handle privacy as a routine, not a fire drill. We answer access and deletion requests within the deadline, review data processing agreements, and keep your privacy documentation in line with the laws that apply to you.

Scope & fees

The recurring privacy work, handled.

Access requests, vendor agreements and new tools arrive every month, each with its own deadline. We set up a repeatable way to deal with them and keep your notices, records and agreements current, so privacy does not depend on one person remembering everything.

What we work on.

Privacy requests

Assess and answer access, deletion and correction requests from customers and employees within the legal deadline.

Processing agreements

Review and negotiate data processing agreements with vendors and customers.

Privacy documentation

Draft and update privacy notices, records of processing and internal policies.

Risk assessments

Prepare data protection impact assessments and privacy risk assessments for high-risk processing.

International transfers

Assess transfers abroad, including cloud providers, and the safeguards they need.

Data breaches

Assess incidents and prepare notifications to the authorities and the people affected, under each law that applies.

How the work unfolds.

  1. Take stock

    Review your processing, vendors and existing documentation.

  2. Prioritize

    Agree which gaps to close first and the deadlines that apply.

  3. Document

    Prepare the notices, agreements and assessments.

  4. Handle the recurring work

    Answer requests and review new vendors as they come in.

Privacy requests are handled within the legal deadline. Documentation projects are planned around your priorities.

Scope agreed.
Fees made clear.

Privacy requests and processing agreements have a fixed price per item. Documentation projects and assessments get a fixed quote.

What shapes the fee

  • Number of systems and vendors
  • Privacy laws in scope
  • Volume of requests

Budgeted separately

Technical audits and translations are quoted separately where needed.

Questions before you start.