Black Penny Consulting logoBlack Penny

Data protection law

UK GDPR / DPA 2018

The UK General Data Protection Regulation and the Data Protection Act 2018 set the legal rules for how organisations collect, use, share and protect personal data.

01Why it matters

The law requires you to demonstrate accountability, not just claim it. Regulators expect records of processing, a lawful basis for every activity, timely responses to subject access requests and breach reports within 72 hours.

02How we help

  • Gap analysis against UK GDPR obligations
  • Records of processing activities (ROPA)
  • DSAR and breach procedures that work in practice
  • Outsourced DPO cover

Something keeping you awake at night?

Tell us what's worrying you. We'll give you an honest view of where you stand and what to do next, no jargon, no obligation.

Arrange a consultation