Black Penny Consulting logoBlack Penny

For the Head of Legal

When the regulator calls, you'll have the evidence ready.

You carry the legal exposure but rarely own the systems. We bridge legal obligation and operational reality, so accountability is documented, not assumed.

01What keeps you up

Sound familiar?

  • A breach with a 72-hour reporting deadline
  • DSARs that could become complaints or litigation
  • Contracts and suppliers processing data you can't see
  • AI tools in use without a lawful basis or impact assessment

02Why it's relevant

Accountability, documented
Records of processing, DPIAs and policies that stand up to scrutiny.
Calm incident response
A tested breach process and people who have been through it before.
AI with a legal footing
Impact assessments aligned to UK GDPR, ISO/IEC 23894 and the EU AI Act.

03What you get

Regulator-ready evidence / Reduced DSAR exposure / Clear supplier obligations

Something keeping you awake at night?

Tell us what's worrying you. We'll give you an honest view of where you stand and what to do next, no jargon, no obligation.

Arrange a consultation