Business

GDPR Products and Services

BUSINESS OBJECTIVES ACHIEVED

To help our client's budget for their GDPR compliance, the Information Law team at Forbes offers a range of fixed fee services for the provision of products and services listed below.

Description	Work Included
DPO Support	A retainer based product that would see Forbes working alongside your DPO to support and assist your DPO in discharging their duties under the GDPR.
Outsourced DPO Service	A retainer based product that would see Forbes act as your DPO to assist in fulfilling your duties under the GDPR.
Review of Documents (e.g. policies and procedures)	Review includes comments, suggested changes and amendments to your data protection compliance policies and procedures. We will also provide advice in relation to any missing and/or necessary documentation.
Data Sharing and Data Processing Agreements	Drafting or reviewing both customer and staff facing privacy policies and notices to ensure compliance with data protection law.
Data Breach Management	Legal support to client at all stages from identification and mitigation, support with handling the breach, advice relating to reporting requirements and conducting lessons learned exercises.
Subject Access Requests	Providing advice and support following receipt of a SAR, including search terms, advice relating to exemptions and redaction and drafting a response which complies with data protection law.
Data Protection Impact Assessments	Providing advice and support with the DPIA process including identifying the need for a DPIA, and measures to be put in place to reduce the privacy risk.
Audits	We conduct audits of existing data protection and FOIA compliance and advise and support clients in implementing measures to improve compliance.
Training	We provide data protection training to our clients which can be customised to maximise changes that have been made to the law and your existing policies and procedures.