OUTSOURCED DATA PROTECTION OFFICER
In 2018, Exeter Students’ Guild reached out to DPAS for assistance in ensuring they were meeting their GDPR implementation goals. By outsourcing their DPO (Data Protection Officer) services to DPAS, the Guild was able to have a flexible, dependable, and knowledgeable resource available to aid them in achieving compliance. The Guild continues to utilise DPAS’s outsourced DPO services in 2023 for assistance with more complex data protection matters.
“We were keen to ensure we were delivering our GDPR commitment on time and on track. Therefore, we needed a qualified Data Protection Officer to monitor our progress, provide assurance that we were on the road to compliance and maintain the role going forward. We sourced Data Privacy Advisory Service, as they were local and have 20 years Data Protection experience. We are very happy with the high standards of service received and the training provided was not only delivered professionally but completely tailored to our business type. I highly recommend Data Privacy Advisory if you have GDPR worries or you are considering having a Data Protection Officer look after your organisation.”
MARK JOHNSON - OPERATIONS MANAGER
DATA PROTECTION OFFICER SUPPORT AND TRAINING
ATT came to DPAS looking for some interim DPO support during the school holidays and some bespoke Data Champion Training for their Data Protection Leads within their schools. We created a training programme for their Data Protection Leads to ensure that they understood their role and responsibilities within their school.
Working with DPAS has been so helpful to us as a trust of 21 academies. On a practical level, the support provided by Nigel and the team has been valuable in resolving pressing issues very swiftly. As we develop our in-house expertise more and more, though, it has been great to tap into the expertise of Natalie and others on the team via high quality training and development sessions. Always flexible and responsive to need, these sessions have done wonders to create a shared sense of understanding and common purpose among all those within our trust with responsibility for data protection.”
ANDY GANNON - DIRECTOR OF CORPORATE AFFAIRS
DATA PROTECTION PROJECT
DPAS was contacted by TMS Maritime when they were in search of a reputable company to assist them with compliance for data protection. As an SME with limited capacity, TMS was uncertain about the requirements and where to start. DPAS collaborated with TMS to evaluate their current data protection methods, determine any necessary improvements, and provide guidance on implementing changes with minimal disruption to their business operations.
“We enlisted DPAS to help with our journey to GDPR compliance as we didn’t have the resource and skills available within our team. DPAS’ approach was thorough, efficient and remarkably unobtrusive from an operations perspective.
Post completion of the project, we not only had a clearer idea of the risks and issues that attend GDPR compliance directly but also managed to tidy up in house data processing to ensure we are more efficient as a business.”
KAREN HOOK - DIRECTOR
DATA PROTECTION PROJECT AND OUTSOURCED DPO
BOXPARK came to DPAS after having a Data Protection Audit, they wanted the support of experts to help remediate risks highlighted within the audit. Having worked with numerous large scale retail businesses, and with BOXPARKS future expansion plans, they knew that they could trust us to support them with this, and future projects.
‘We decided to use DPAS because we felt that they were a good fit for the BOXPARK brand being a boutique data protection advisory company. Since the commencement of the project we have received fantastic service, delivered by a great team which has made a highly complex project easy to digest. They hit every deadline and continue to provide us, and our team, with easy to understand data protection advice and support.’
MATTHEW CARTER - HEAD OF INFORMATION SECURITY
OUTSOURCED DATA PROTECTION OFFICER
Bristol Airport approached DPAS several years ago, looking for data protection officer outsourced support. They wanted advice on projects across the Airport, and support assisting the in-house team in responding to complex enquiries. DPAS has been providing DPO services since, providing support remotely, to ensure the airport maintains its consistent compliance whilst they undertake new, large scale projects.
“Bristol Airport have worked closely with DAPS for several years – they have been instrumental in providing services helping us to deliver transformative projects across our Airport. Legal support, with an ethical and pragmatic twist.”
KATE MADDOCK-JONES, DATA PROTECTION MANAGER
DATA PROTECTION PROJECT AND OUTSOURCED DPO
Menstrual Cycle Support reached out to DPAS for assistance with data protection prior to launching their new website. As a new business with limited resources and knowledge of data protection, DPAS provided advice, policies, and legal services to ensure they were prepared for their website launch.
‘“I was extremely relieved to find the friendly team and excellent service at DPAS. They went out of their way to support me in a short timeframe, not only to fulfil my data privacy criteria – which included more complex special category data processing – but also with trusted legal support, which – being all under one DPAS roof – was easier to access and significantly more time and cost-effective”.
KATE SHEPPARD-COHEN, CEO
SUBJECT ACCESS REQUESTS SUPPORT AND INTERIM DATA PROTECTION MANAGER
Royal Devon came to DPAS were looking for interim support, on and off site, to assist with day to day data protection requirements, SARs and DPIAs. They knew that we had the capacity and capabilities, had experience in healthcare, and could to hit the ground running and work as part of their team.
“On top of an already demanding workload, we had a new system integration, a merger to form a new Trust, and the impact of Covid to deal with. DPAS really helped to take the pressure off by helping with complex SARs, and DPIAs. Having no idea how many SARs you may receive, having the ability to flex by using additional resources can be quite useful. Knowing I can rely on Charlotte’s support with DPIAs and data sharing agreements, really takes the pressure off. It is really helpful, having someone that can take the time out to review requests. – Information Governance Manager”
INFORMATION GOVERNANCE MANAGER
DATA PROTECTION AND INFORMATION SECURITY AUDIT
The Rhodes Trust approached DPAS looking for an external consultancy to provide an impartial data protection and information security audit and board-level report. They wanted support to help identify, and address, any vulnerabilities or weaknesses in their data protection practices, and advice on any necessary changes to meet legal and regulatory requirements.
‘We were looking for an independent review and audit of our data processing activities and policies across the Rhodes Trust and our partner programmes. When we went to the market DPAS impressed us with the breadth and depth of the services they offered.
We are a relatively complex organisation, the DPAS team quickly understood how our work fits together, and throughout the audit process I’ve appreciated the expertise of each member of the team that we’ve worked with. Their advice throughout has been reassuringly thorough, pragmatic, and tailored to our needs.’
MATTHEW TREAVIS - HEAD OF INFORMATION SECURITY
DATA PROTECTION TRAINING
The DVLA (Driver and Vehicle Licensing Agency) awarded a training contract to DPAS to provide a variety of Data Protection and Information Security training courses to their staff. The DVLA recognised DPAS’s accreditations and expert trainers, who were able to deliver engaging and effective training sessions.
“It did exactly what it said ‘on the tin’, a great foundation in data protection law. Every part of the course was relevant, informative and enjoyable. It was by some distance the best course I have attended via MS Teams, which is largely down to the excellent trainers. They were clearly extremely knowledgeable about the subject and kept everyone on the course fully engaged and involved throughout the three days. They were also very attentive to all participants, very happy to answer and discuss any questions that were raised.”