If you process any personal data – for your employees, contractors or clients, you need to be confident you’re not breaching data protection rules.
Our Data Protection Health Check package is a quick and easy way to address your compliance needs. You’ll get a report identifying any gaps in your compliance and access to jargon-busting training materials for your staff.
An audit is your first step towards compliance, providing a bird’s-eye view of what personal data your organisation is handling and where the key risks lie.
Be aware, however, that the audit alone won’t guarantee compliance. You may need to take extra steps and access follow-up support to make sure you’re complying in full.
Demonstrate accountability
UK GDPR imposes an accountability requirement on every business that controls or processes personal data. You must be able to show – on an ongoing basis – that you’re meeting the requirements of UK GDPR. A data protection audit is one of the best ways to do this.
A clear action plan
We’ll highlight any pitfalls and use our experience to prioritise action points, providing practical recommendations specific to your business and data practices.
Help manage your data
Because the data protection audit involves a company-wide review of your data, you’ll be able to identify what unnecessary data you hold and dispose of it in line with your data retention policy.
Rely on our expertise
As experts with a rare mix of technical legal knowledge and hands-on industry experience, we’re able to solve problems quickly and provide you with practical solutions.
Raise staff awareness
Your staff need to understand data protection rules and their impact on the way your business treats personal information.
Provide peace of mind
Once we’ve carried out a full data protection compliance audit, and you’ve implemented our recommendations, you can feel assured you’ve taken all reasonable steps to meet your obligations under UK GDPR.
Package deliverables:
When it comes to data protection, there is no one-size-fits-all approach – you must put measures in place and design a compliance programme that’s proportionate and appropriate to your organisation.
Our Data Protection Health Check is the perfect starting point, offering two options based on your business’s complexity, size or specific needs. It’s designed to help you meet your obligations under UK GDPR and data protection laws.
Your Health Check begins with a comprehensive questionnaire covering all aspects of your organisation’s data processes, which helps us understand your current level of compliance and any related risks.
Based on this, we’ll provide a gap analysis report that sets out our findings and recommended steps to help you:
Your report will be confidential to you and your organisation.
A key principle of UK GDPR is accountability. Ensuring your team have appropriate training is one way to demonstrate compliance, as well as helping to reduce your chances of a data breach.
Access three practical training videos covering:
After your Health Check, you can work with us to help you implement your remediation plan to address any gaps in your compliance. This work will be costed separately from the Data Protection Health Check and can also be provided as part of our outsourced Data Protection Officer as a Service (DPOaaS). Our DPOaaS offers ongoing, cost-effective compliance management with expert guidance—giving you all the benefits of a DPO without the need for an in-house position.
Our data protection services include:
Data Protection Impact Assessments
Data Protection Officer Support Services
Arrange your data health check
We’re not like traditional law firms. To provide your business with flexible and affordable legal support, there are three different ways you can work with us: pay-as-you-go and two subscriptions. Learn more about our service plans.
| Service plan
|
Engage
Legal support on our Standard Rates |
Enable
Monthly subscription |
Extend
Quarterly subscription |
| Health Check (standard)¥ | £2,088 | £1,044* | Cost equivalent to six hours from your plan |
| Health Check (comprehensive)≠ | £4,176 | £2,088* | Cost equivalent to 12 hours from your plan |
Our standard Data Protection Health Check is the equivalent to six hours, and is ¥geared towards small to medium businesses with average data processing practices. Our comprehensive Health Check is equivalent to 12 hours of legal support ≠better suited to data controllers or more complex organisations. The costs listed are exclusive of VAT. Our Enable and Extend plans offer up to 50% discount on our Standard Rates (Engage plan). *Minus any accrued credit on your Enable plan.
Testimonials
We initially turned to Harper James for help in one part of our business but quickly realised we could benefit from their support in other areas too. The level of service has been impressive. What I like about Harper James is they seem to take a proactive approach to legal services provision. They’ve looked at our business and made suggestions as to areas where they can best focus their support and expertise. It is reassuring to have a legal services provider like that working alongside you.
Heidi Ayton Chief of Compliance, Croud
Harper James have become a vital part of our business. We get quality advice from experienced solicitors at prices that other firms do not appear to be able to match.
Veejay Lingiah CEO, Flash Sticks
It's very cost efficient and fast. I have enjoyed talking to everyone in the company as they are not only knowledgeable but can also relate to the situations that I need assistance with. Very happy!
Kerem Sozugecer Founder & CEO, LeftBrain Technology
As a young company, getting the right advice regarding staff, contracts, policies and procedures can be crucial. Harper James delivers this for us with professional, expert lawyers across all our desired areas, who are always able to provide all the support we need and more. This has enabled us to concentrate more on growing and developing our business.
Imogen Wethered CEO, Qudini
Becky went above and beyond the call of duty… she was emailing me on Christmas Eve to get the matter sorted before the looming deadline. She also pivoted the data terms when a Brexit deal was reached, at the eleventh hour. It’s really helped make sure we are on top of things for our European clients
Kate Peever Operations manager, Growth Engineering
Very easy to work with, explain complex information in a clear and accessible manner. Spent the extra time to research and confirm all options and was very clear about the costs and confirmed before any commitment.
Martin Farrington Director of Information Technology, The Future Laboratory
Lillian is really helpful and clear in her communications. Her advice is pragmatic and she works in a timely manner, as well as having an approachable nature.
Janna Bates Head of HR, easyfundraising
Data protection compliance is rarely straightforward and can overwhelm some small and medium-sized businesses.
Our data protection solicitors are here to support your business, providing clear, jargon-free advice that allows you to effectively maintain your business as usual while complying with various data protection rules.
Our team has a rare mix of technical legal knowledge and hands-on industry experience. We have extensive experience gained at other top law firms, and many of us have worked in-house for large commercial organisations. So, we understand the practical difficulties businesses face when trying to meet their data protection obligations.
Find out more about the team here:
Senior Solicitor - Data Protection & Privacy
Becky is a highly knowledgeable commercial lawyer, specialising in Data Protection and Privacy Law. She can add value to a business by drawing on nearly 20 years of in-house experience.
Senior Solicitor - Data Protection & Privacy
Lillian, an experienced data protection solicitor, supports C-suites, GCs, and Privacy Offices with domestic and international data protection needs. She specialises in UK compliance, AI governance, and was Group Compliance Officer at a plc-listed company.
Partner - Commercial
James heads up the Data Protection team at Harper James, ensuring the team delivers practical, business-focused solutions to help clients meet their data privacy objectives. With over 25 years of experience in commercial and technology law, James specialises in advising businesses of all sizes – from start-ups to established enterprises – on achieving their commercial objectives.
Senior Solicitor - Data Protection
Trevor’s experience includes managing complex data subject access requests, data breach response, privacy programme development, due diligence on corporate M&A transactions, and all manner of domestic and international data processing and sharing agreements.
Finding the right legal partner
Choose a legal partner you can trust: we’ll help protect your goals, your business and your people so you can move forward with confidence and focus on growing your business.
Clear itemised invoices, subscription plans with up to 50% discount, and fixed fee products help you plan and manage legal spend – with no nasty surprises.
We’ve supported over 8,000 businesses since 2014, with an ‘Excellent’ rating on Trustpilot and a Net Promoter Score (NPS) of 60+ from monthly client surveys.
We’re here to make things easier, not add complexity. That means fast response times, practical expert legal advice delivered in plain English, and dedicated client service and account management support.
We’re an SRA regulated firm, but more importantly, we build quality, data, and compliance best practice into everything we do.
Appointing a legal partner is a big decision. That’s why we’re open about our values, culture and model, so you can see what makes us tick. And because a productive partnership starts with understanding, we always begin with a conversation – listening to your goals, pressures and plans, then tailoring our support to fit.
Data protection legislation applies to any information an organisation keeps on its staff, customers and suppliers, and will likely inform many elements of business operations, from recruitment and HR, to sales, marketing or account management.
Businesses are operating in a data-centric world where personal data is the new ‘commodity’. If the Information Commissioner’s Office (ICO) receives a complaint about your company, they will investigate.
The resulting impact can include any of the following:
Whether a claim has merit or not, your team will lose precious time evaluating and responding to any issues. This distracts from your business as usual and can affect your bottom line.
The ICO can take enforcement action which could significantly impact your business operationally, for example by banning the processing of data or suspending transfers.
Actions by ICO and court proceedings are in the public domain, so if you are found to have breached UK GDPR the damage to your organisation’s reputation could be long-reaching and signify a breakdown of trust with your customers/suppliers/employees.
Individuals are more data protection savvy, meaning they understand their rights more. If a fault occurs, they can issue a private claim directly through the courts for compensation.
The UK GDPR and DPA 2018 set a maximum fine of £17.5 million or 4% of annual global turnover – whichever is greater – for severe infringements.
It’s important to note that directors can also be personally liable for data breaches or other data protection failures in some circumstances.