OUR APPROACH
What we do, and where we start.
Every organization now runs on personal data, and everyone it deals with wants to know that data is in good hands. We work in four practice areas that together answer that question, and we offer them at three levels, depending on where you are today.
Four Practice Areas
01
02
03
04
Three Solutions
Foundational
Operational
Sustained
PRACTICE 01
Privacy and Data Protection
We build your foundation, equip your leaders and in-house teams, and stay as the rules evolve.
Most organizations do not set out to ignore the Data Privacy Act. They download a privacy manual, name someone as data protection officer, and move on. The trouble comes later.
A customer asks what you hold about them and nobody knows who should answer. A large client sends a vendor questionnaire. The National Privacy Commission asks whether you are registered. The documents exist, but nobody has worked out how the business follows them.
The law applies to almost anyone who handles personal information, whatever their size. What changes with size is how much structure you need. A forty-person clinic and a bank owe the same duties to the people whose data they hold, but they should not be running the same program.
We start by finding out what personal data you hold, where it sits, who touches it and why. From that we build only what you need, and we stay long enough to see it working.
WHAT WE DO
Registration
We test whether you must register, file the registration and keep renewals on schedule.
Impact assessments
A structured look at new systems before they launch, with fixes ranked by risk.
DPO Support
We train and back up your DPO, share the role, or serve as your outsourced DPO.
Data subject requests
Simple procedure for people who ask to see, correct or delete their data.
Data Mapping
Record what you collect, why, where it goes and how long you keep it.
Training
Sessions for staff, managers and boards, fitted to what each group needs.
Policies and notices
Privacy manual, notices and consent wording written for your operations.
Regulatory support
Help responding to NPC inquiries, compliance checks and complaints.
CALL US WHEN
-
You are not sure whether you need to register with the NPC
-
Your DPO was appointed in paper but had no formal training
-
Your privacy notices and policies were copied from a template
-
A client or auditor asked proof of compliance
-
A client or auditor asked proof of compliance
-
Your industry is due for a compliance check
Not applicable? Click on these other practice areas:
OUR SOLUTIONS
Wherever you are on your compliance journey, we meet you there.
We build your foundation, equip your leaders and in-house teams, and stay as the rules evolve.
HOW WE ENGAGE
Three ways we work with you.
Fixed-scope Projects & Deliverables
We may be engaged to deliver a defined policy, audit report, review, or other documents at a fixed fee.
Retained Advisory & DPO Support
Ongoing access to our team as your outsourced or co-sourced Data Protection Officer, with regular reviews and regulatory updates.