GDPR current state and gap analysis

Who it is for and when

Suits organisations that process personal data and need to know where they stand, either because nobody has gone through it systematically or because a customer, owner or supervisory authority has asked.

• Nobody has gone through data protection systematically since the GDPR came into force.
• A customer or procurement requires you to show how you meet the requirements.
• You are not sure where all personal data is held or how long it is kept.
• An incident or a question from the supervisory authority has put data protection in the spotlight.

What we do

1. Scope and processing activities. We agree which parts of the business and which processing of personal data are included, and review what documentation exists today.
2. Review against the GDPR requirements. Legal basis, information to data subjects, records of processing, retention, processors, security and incident handling are reviewed with those who own the questions.
3. Gap per requirement. Each requirement is assessed as in place, partly in place or missing, with a short rationale and evidence.
4. Risk assessment. The gaps are weighed by the risk to data subjects and to the business, not just by how easy they are to close.
5. Action plan and management walkthrough. A prioritised plan with proposed ownership and sequence, presented so that decisions can be taken straight away.

Scope and price

A defined engagement that normally takes a few days to about a week, depending on the size of the organisation, how many processing activities are included and how much documentation exists.

The price varies from engagement to engagement and depends on the scope above. You get an estimated cost proposal and, where possible, a fixed price. Implementing the actions is quoted separately.

How it works

1. A first conversation. We listen to your situation and explain how we usually set up the work. You get our assessment straight away, free of charge.
2. A proposal with scope and price. A short written proposal with what is included, what you get, who does the work and what it costs.
3. Delivery and handover. We work together with your organisation, report continuously and hand over so that you can maintain the result yourselves.