GDPR – Directors in the dock?

As owner manager of an SME, data protection and in particular GDPR compliance has been an ongoing source of stress – thankfully never a critical issue but always lurking as a potential problem. I knew that whilst we did take data protection seriously, we didn’t have the proper policies and processes in place to document what we were doing and that we were unlikely to impress the ICO should we ever need to have contact with them. Our situation is complicated by the fact that we deal with international data and transfer data out of the UK/EU to third countries.

Data2Action walked me through the process with huge patience. Karen did a great deal of the heavy lifting, investigating our processors privacy policies, drawing up all the documentation we need and organising the processes that we need to apply to be and to show that we are compliant. What felt like an impossible task became manageable and Karen was always available to talk me through it and keep me on track. I found her solutions very practical and pragmatic which is absolutely essential when you have a business to run and need to keep the staff who actually have to implement the policies on board. From the first meeting, Karen had clearly done her homework on our company and has a proactive approach to finding solutions for us.

I would be happy to recommend Data2Action to other companies looking to get to grips with their GDPR compliance.

Christine, Pantheon Macroeconomics Ltd

“We had an exceptional turn-out for our GDPR workshop with members of the Entrepreneurs’ Forum and Data2Action’s presentation was superb – in fact we’ve had the best feedback from any event we’ve held so far this year. Data2Action gave perspective on why we’ve arrived at the new regulations, some practical, common sense advice and guidance on actions to take, whilst reassuring us all that it’s not an insurmountable task. Most importantly they did it without and jargon and answered every question from our delegates with great authority. I think everyone left the event feeling far happier that they could now tackle the changes, armed with some new knowledge and a few myths dispelled.”

“An engaging leader who delivers the complexities of regulation in a simple, easy to understand, pragmatic and practical way. A privacy and operational professional, Data2Action worked across the broad team bringing the subject of data privacy and protection to life. Instrumental in the design and delivery of our GDPR governance, standards and control framework, operational processes and training and the setting up our ‘Office of the DPO’, Data2Action were subject matter experts to internal and external stakeholders (including the ICO). For anyone looking for support in their privacy journey, Data2Action comes with our highest recommendation.”

“Sarah has been instrumental in developing and supporting our senior team in creating a programme of initiatives to transform our customer facing business. Her patience and willingness to develop the team in project and change management skills and by imparting her extensive knowledge of organisational transformation, has accelerated our thoughts and ability to create and deliver a change programme of this magnitude. She is confident, engaging, understanding of key stakeholder needs, independently responsive to stepping beyond her remit and absolutely driven to help us create an infrastructure to realise our strategic goals. We would unreservedly recommend her to any prospective client or employer.”

“A great speaker at our GDPR workshop. They took a complicated subject and explained it clearly and with enthusiasm. The team at Data2Action understand the value of relationships and that people are at the heart of business. I would happily recommend the Data2Action team.”

“Informative and clear, Data2Action bought the whole topic of GDPR to life and just as importantly, we recognise the value that this legislation can now bring to our organisation and clients. Adopting a straight forward and engaging approach (they) helped my team get a much clearer understanding of whats required and how we can work as a team to deliver this. Really good value for money.”

“It was great to be provided with clear, comprehensive and more importantly sensible, advice of GDPR legislation, a very complex subject. The advice was pitched perfectly for our needs and the format in which this was delivered was nice and simple to follow.”

“Having already spent several months on our new CRM software we weren’t really moving forward with it. Data2Action came to our offices and made what we thought was an impossible task look so simple.

It was a breath of fresh air … we now have a simple, mapped out plan to work on which I believe will be a game changer for me and my business.

All of this was achieved by using data, information and the abilities that we already have in our business. The trouble is we are all so busy with the daily routine we miss what is in front of our eyes , the gold dust when it comes to marketing out business.  I would have no problem recommending Data2Action to any company looking to catch up with the 21st Century.”

“Data2Action were recommended to us and having developed and embedded a ‘pathway to compliance’ plan into our business, they went on to provide a full operational review and in-depth analysis using our data. Having produced a suite of fabulous visualisations, they helped transform how we work with data which has in turn brought an identifiable saving of around 30% on costs overall”

“Thank you so much… I felt our GDPR audit session was extremely valuable as it helped me understand much of the GDPR terminology and what this means in our school. I feel that this risk assessment approach has helped me prioritise what I need to complete in order of importance. This together with your professional advice and support, will help me to formulate a plan of action which will be very useful.”