Data Protection and Privacy
NDPA, POPIA, Kenya DPA and GDPR compliance: audits, data mapping, impact assessments, breach response and outsourced Data Protection Officer.
Class A — Documentation and assessment
| Service | Turnaround |
|---|---|
| Breach Response Playbook and Notification Templates A playbook that gets you to a defensible regulator notification inside the statutory window, written before you need it. | 5 business days |
| Cross-Border Transfer Impact Assessment An assessment of your international data transfers and the mechanism each one relies on, including cloud processing outside the country. | 5 business days |
| Data Protection Impact Assessment A documented impact assessment for a high-risk processing activity, with mitigations and a residual risk conclusion your DPO can sign. | 5 business days |
| DSAR Handling Process and Templates A process for handling data subject access requests within the statutory period, including identity verification and redaction. | 5 business days |
| Kenya DPA Readiness and ODPC Registration Pack Readiness assessment against the Kenya Data Protection Act with the controller or processor registration pack for the ODPC. | 5 business days |
| NDPA/NDPR Compliance Gap Assessment An assessment of your processing against the Nigeria Data Protection Act 2023, with the specific actions needed before your annual audit return. | 5 business days |
| POPIA Readiness Assessment A readiness assessment against South Africa's Protection of Personal Information Act, including Information Officer obligations. | 5 business days |
| Privacy Notice and Consent Framework Suite Privacy notices and a consent framework that meet the transparency standard without being unreadable. | 5 business days |
| ROPA, Data Mapping and Retention Schedule A record of processing activities built from how your systems actually work, with a retention schedule you can defend and operate. | 5 business days |
Class C — Scoped engagement
| Service | Turnaround |
|---|---|
| NDPA Compliance Audit and Annual Return FilingPartner signed The annual data protection compliance audit and the filing of your Compliance Audit Return with the NDPC. | As scoped |
Class D — Retainer
| Service | Turnaround |
|---|---|
| Outsourced Data Protection Officer A named Data Protection Officer discharging the statutory role, including regulator contact and data subject escalation. | Ongoing |