Privacy Audit Service

Assess your privacy compliance

Regulatory compliance is not a one-off exercise. True compliance involves consistently identifying and managing emerging privacy and security risks. An internal audit, conducted by a privacy expert, can help you validate whether your practices are in line with the GDPR and/or PECR (as applicable).

The benefits of a privacy audit

• Regulatory compliance

  Get independent assurance that your data privacy policies and practices meet the relevant legal requirements.

• Reduce operational risk

  Identify and resolve operational and systemic weaknesses in your organisation’s handling of personal data and direct marketing practices.

• Stakeholder confidence

  Gain stakeholder confidence in your data privacy processes.

• Consumer trust

  Demonstrate your organisation’s commitment to data security and privacy, and protecting individuals’ rights and freedoms.

What you can expect

Our experienced data privacy team will assess your organisation’s data privacy and information security practices through an on-site compliance audit, checking them against relevant regulatory requirements, ICO (Information Commissioner’s Office) guidance and IT Governance best practice.

We will:

• Review documentation (policies, procedures, records, etc.);
• Check that required controls are in place (e.g. CCTV, access controls, and other security measures); and
• Conduct interviews with key members of staff.

After the audit, you’ll receive a report that records the consultant’s observations and findings, as well as a separate audit tool workbook that contains the detailed audit results.

This is not a legal service, but our sister company GRCI Law Limited can offer legal advice where potential legal issues are identified.