What it involves
A review of what data you process and on what legal basis, the record of processing activities, contracts with processors, a procedure for handling data subject rights, impact assessments where they are needed and a breach protocol. We approach it from the technical side, which is where purely legal consultancies tend to fall short.
