Advice & Assurance

We can provide you with specific advice or assurance services on a range of areas relating to how you manage data, records and information. From benchmarking to full audits, get in touch!

  • Our DP Advice and Assurance service can work with you on a range of DP related topics. Some examples of the sorts of things we have helped with before include;

    Advice:

    • UK GDPR advice and guidance on specific products and services, including support in the completion of a Data Protection Impact Assessment (DPIA) and implementing Data Protection by Design. 

    • Isle of Man GDPR advice and guidance on a new product for use in a medical context, including DPIA support and advice on third party management and due diligence. 

    • Support on a complex Subject Access Request (SAR) for a small charity, including assistance in reviewing documentation held and preparation of the final response. 

    Assurance:

    • GDPR compliance maturity assessment for a number of organisations to determine the effectiveness of controls and support ideas for further innovation and growth. 

    • Assessment of compliance with the UK Information Commissioner's Office (ICO) accountability toolkit. 

    • Audits of third party suppliers for levels of assurance for a large Data Controller.

  • Either as part of proactive advice or assurance, we can work with you to advise on a number of marketing practices, including:

    • Marketing preference management

    • Cookie settings and management

    • Data brokerage due diligence

  • If you are looking to install new CCTV and/or monitoring equipment, or looking to review current technologies and controls, we can review to provide advice and guidance on any actions to meet statutory and best practice standards. This includes static cameras, dashcams, body worn cameras and other similar technologies. 

    In addition this can be combined with a review of internal employee controls where any of the surveillance relates to monitoring of employees to ensure compliance with HR & Data Protection requirements. 

  • AI based tools present opportunities for businesses, at the same time presenting threats to your personal and commercially sensitive information. Governing and managing the use of them can present challenges in of themselves. As part of some advice or a review of controls, we can give you advice and assurance on;

    • Policy and Governance of AI use

    • Training and skills of staff

    • Third Party Management and assurance

    • Data Quality and management to assist in the development and deployment of tools

  • From support on handling complex requests or your implementation of FOI related controls through to conducting a full compliance audit, including with any codes of practice. This includes the Freedom of Information Act (England and Wales) the Freedom of Information (Scotland) Act and the Isle of Man Freedom of Information Act.

Areas where we can help

  • We do not currently offer the certification and formal audits for ISO27001 certification, however we can assist with advice and reviews, including acting as your ongoing internal audit provider for your ISO framework. 

    Additionally we support clients in the management of the framework and assist in their journey to go for and sustain certification with ISO27001. 

  • We have worked with a number of clients to assist them in their NHS DSPT submissions and management. This includes working on specific elements of the toolkit through to management of the annual submission and compliance workplan throughout the year. 

  • We can support your organisations needs when it comes to your Information & Records Management framework. A key element of any GDPR/FOI/InfoSec framework we can work with you on advising the best approach and development of controls through to reviewing current controls and highlighting areas of improvement or weakness. This includes;

    • Document creation and capture

    • Management in various platforms including Microsoft 365

    • Digitalization of processes

    • Retention periods

    • Deletion processes

    • Digital Preservation

What our clients say

“I have worked with Scott to both understand what was required for a new UK company had to do to comply with GDPR requirements. This included calls and explanations to our Hong Kong office to explain the requirements that were needed in order for us to comply and register with the ICO and World-pay. He did a great job in explaining it simply to both me and to the team whose second language was English.”

- Janice, Technology Services

“We engaged Lighthouse IG early in our GDPR/compliance journey. Scott was a great asset to us in determining what we specifically needed to do, how this affected our service users and how we could embed great data practices into how we provide services.”

- Andrew, Charity Sector

Our Approach

Speaker presenting at a conference podium to an audience, with a projected slide titled “Suggested Activity.”

How we can help

  • If you are just starting out on your data journey, we can offer a budget friendly GDPR Health Check covering the essentials.

    Get in touch for a free, no obligation chat and we’ll even throw in a copy of our AI Governance checklist

  • If you are looking for something more advanced to meet your needs we can offer a free discovery workshop to help determine the precise need.

    We can then see what is best for your circumstances from a more in-depth benchmarking review right the way through a full compliance audit or project.

  • If you are already aware of your needs, or are even looking to review established needs and programmes, then we can have a free, no obligation chat to talk about either a DPO as a Service, an ongoing retainer agreement for ad-hoc work or a specific consulting/audit package

Consultancy

Gap Analysis

Assurance

Black-and-white overhead view of a four-person rowing crew in a racing shell on rippling water

From compliance with legal standards and expectations through to sector specific codes and best practice, we can support your organisation through advice and assurance services. We can provide advice and assurance on any of above following areas and work with you to tailor the service to meet your specific needs. 

Get in touch