If you are processing data that is likely to result in a high risk to individuals you need to perform a data protection impact assessment (DPIA). We also recommend doing a DPIA ahead of any big project that involves processing personal data in any way.
In addition to assisting with data protection impact assessments, our team can assist you across all areas of data protection & privacy law, including:
DPIAs are all about assessing risk. In particular you need to ask: could the way you process data cause harm – either to individuals or to society as a whole? We can guide you through the DPIA process. In particular if you identify a high risk of harm that requires notifying the Information Commissioner (the ICO) our data protection solicitors can liaise with the regulator on your behalf. Our data protection impact assessments cover:
GDPR training
To ensure relevant staff understand the importance of DPIAs and when one might be necessary.
Provision of data protection impact assessment guidelines
Documenting the risk
To individuals following consultation with your data protection officer and other staff.
Compiling the DPIA
Describing the nature and context of your processing and ensuring full GDPR compliance.
Considering modifications to your processing methods to mitigate identified risks.
Reporting your intended processing project to the ICO if a high level of risk is identified.
Providing advice, where necessary on whether a DPIA is required, usually where processing is likely to result in a high risk to individuals.
This might be where you intend to carry out systematic monitoring or profiling or you are considering the processing of children’s data.
Responding to any decision by the ICO, that prevents you from processing the data.
DPIAs encourage employees to think about the implications of their data processing activities, and in particular the risk of harm to individuals their work may cause.
You don’t have to publish a completed impact assessment. However releasing the documentation – for example on your website – is a clear signal that you take data security seriously and will increase consumer trust.
The data protection impact assessment procedure is designed to reduce the risk of harm to individuals. But a properly considered DPIA can also provide your business with compliance and financial benefits by reducing the risk of serious data breaches and regulatory sanctions.
Remember that an impact assessment is a compliance tool designed to identify and reduce the risks involved in a particular project you intend to carry out. A properly considered and completed DPIA demonstrates that you have taken the necessary steps to avoid harming individuals through your data processing. You should:
A data protection impact assessment form is only required when your data processing is likely to result in a high risk to the rights and freedoms of individuals. And it is only if you can’t mitigate the risks that you need to consult with the ICO prior to carrying out the processing. At Harper James Solicitors, we have the expertise to identify risk and advise on mitigation. We are familiar with how the regulator approaches high risk processing and can liaise with officials there when your DPIA identifies a high level of risk that can’t be reduced.
Finding the right legal partner
Choose a legal partner you can trust: we’ll help protect your goals, your business and your people so you can move forward with confidence and focus on growing your business.
Clear itemised invoices, subscription plans with up to 50% discount, and fixed fee products help you plan and manage legal spend – with no nasty surprises.
We’ve supported over 8,000 businesses since 2014, with an ‘Excellent’ rating on Trustpilot and a Net Promoter Score (NPS) of 60+ from monthly client surveys.
We’re here to make things easier, not add complexity. That means fast response times, practical expert legal advice delivered in plain English, and dedicated client service and account management support.
We’re an SRA regulated firm, but more importantly, we build quality, data, and compliance best practice into everything we do.
Appointing a legal partner is a big decision. That’s why we’re open about our values, culture and model, so you can see what makes us tick. And because a productive partnership starts with understanding, we always begin with a conversation – listening to your goals, pressures and plans, then tailoring our support to fit.
What attracted me to Harper James was the pricing model they have in place. It means we get access to top legal professionals at prices we can afford. In our most recent funding round, the support we received was vital.
Mikhil Raja CEO, SonicJobs
I can’t sing our solicitor’s praises enough: fast, efficient, sensible and supportive. A quick and fair resolution to all queries that we have worked on together and would thoroughly recommend her to any of my contacts.
Samuel B Higgs Account Director, Signal Media
As a young company, getting the right advice regarding staff, contracts, policies and procedures can be crucial. Harper James delivers this for us with professional, expert lawyers across all our desired areas, who are always able to provide all the support we need and more. This has enabled us to concentrate more on growing and developing our business.
Imogen Wethered CEO, Qudini
Choosing Harper James was one of the best choices we made as a start-up. The firm has provided invaluable advice and insight throughout the early stages of our business.
Leigh Purnell CEO, Petalite
Our solicitor at Harper James, Sarah, was really effective with the time over the phone and used the time to provide us with direct advice - no faff and her advice really helped us to do the next steps. She followed up quickly and delivered the document really quickly too, it is fantastic to have lawyers that are reliable and are responsive too. I am very happy with our experience with Harper James!
Hawaa Budraa CEO and Co-Founder, Onaria Technologies
For us, the support of Harper James Solicitors has been a gift. The collaboration we have had has been of tremendous importance. The service has been superb value for money.
Iraklis Bourantas COO, Novoville
Quite frankly I was stunned at the low cost of the service given the value it provided us.
Dr Matthew Carr CEO, Luffy.ai
It's very cost efficient and fast. I have enjoyed talking to everyone in the company as they are not only knowledgeable but can also relate to the situations that I need assistance with. Very happy!
Kerem Sozugecer Founder & CEO, LeftBrain Technology
Knowing you have that level of legal support enables any new business to be able to move forward with more confidence. With Harper James we have that - and more.
Julian Cook CEO and Co-Founder, Howamigoing
Harper James have become a vital part of our business. We get quality advice from experienced solicitors at prices that other firms do not appear to be able to match.
Veejay Lingiah CEO, Flash Sticks
Harper James have been incredibly professional and responsive. They immediately understood the challenges we have. Not only those of any small business, but those relating to building a piece of complex tech, and they have been able to help us navigate that from a legal perspective.
Alastair MacGregor Founder, Do IT
Having the Extend plan with Harper James gives us constant access to leading legal experts across the areas of law we need to keep growing our business. I’m convinced no one delivers better service or beatable value.
Paul Hutton CEO, Cranfield Aerospace Solutions
Harper James solicitors don’t speak in the legalese which I have heard too many times from other solicitors and which is totally unhelpful. What I’m after is focused, considered advice about the specific situations that I face. By which I mean, do you think this is a good idea? Their response might be ‘Yes’ or ‘No’. One word is often all I’m looking for! My solicitor gives a view and I really value that.
Tom Davenport MD & Co-Founder, Alvius
Harper James provides my small growing business with a scalable, reliable, team-oriented approach to legal advice. Whenever we face a problem, I know that Harper James are there to provide helpful and cost-effective advice, to scope out the options, make clear the costs and risks, and give me the information I need to make decisions.
Bryn Richards CEO, Aeristech
Very easy to work with, explain complex information in a clear and accessible manner. Spent the extra time to research and confirm all options and was very clear about the costs and confirmed before any commitment.
Martin Farrington Director of Information Technology, The Future Laboratory
Lillian is really helpful and clear in her communications. Her advice is pragmatic and she works in a timely manner, as well as having an approachable nature.
Janna Bates Head of HR, easyfundraising
If you are embarking on large scale data processing and you are concerned about the risk to individuals get in touch with us. We offer general advice on the occasions when a DPIA is essential as well as on those instances where one may be desirable. We can also assist with the DPIA itself, advising you on the steps you need to take, who you need to involve and the issues you need to raise to ensure your DPIA is effective. We have a specialist team of solicitors, regularly engaged in training and advising commercial clients and their staff on all aspects of GDPR compliance.
As a fully integrated commercial law firm we can also provide you with support across a range of services to help your business go from strength to strength. With a deep understanding of the inner workings of growing businesses, we can provide you with all the legal support you will need to thrive.
Find out more about the team here:
Quality and Compliance Director & Commercial Partner
As a previous partner at DLA Piper, Sarah comes with a rich pedigree in providing expert commercial services for her clients.
Partner - Commercial
Before joining Harper James, Rob worked for Santander bank as an IP/brand management lawyer and also at Shakespeare Martineau.
Senior Solicitor - Data Protection & Privacy
Lillian, an experienced data protection solicitor, supports C-suites, GCs, and Privacy Offices with domestic and international data protection needs. She specialises in UK compliance, AI governance, and was Group Compliance Officer at a plc-listed company.
Senior Solicitor - Commercial Technology & Data Protection
David is a senior commercial solicitor, specialising in technology and data protection. He joins us having worked as in-house counsel for the BBC and OUP.
Senior Solicitor - Data Protection & Privacy
Becky is a highly knowledgeable commercial lawyer, specialising in Data Protection and Privacy Law. She can add value to a business by drawing on nearly 20 years of in-house experience.
Senior Solicitor - Data Protection
Trevor’s experience includes managing complex data subject access requests, data breach response, privacy programme development, due diligence on corporate M&A transactions, and all manner of domestic and international data processing and sharing agreements.
"Harper James is a one-stop shop for anything legal. It has excellent breadth, with experience on a large number of deals and multiple departments for different legal areas."
Chambers and Partners
Pricing and service plans
Our three transparent service plans are designed to give you the widest possible access to high-quality legal advice, whatever the size and nature of your business:
Flexible access to senior solicitors at highly competitive rates
An alternative to our subscription plans, offering access to full service legal expertise on a project-by-project basis.
Purpose built legal support for start-ups and smaller businesses
Monthly subscription plan for £259 per month, with £174 monthly credit and access to all legal services at 50% discount on our Standard Rates.
Comprehensive legal partnership for established businesses
Fully account managed and scalable annual subscription plan with support from a curated team of partners and senior solicitors, with up to 33% discount on our Standard Rates.
Learn more about our service plans
Legal updates
10 March 2026
Legal updates
29 April 2025
Thoughts and opinions
8 February 2023
Legal updates
11 January 2023
Thoughts and opinions
14 September 2022
Thoughts and opinions
14 July 2022
Legal updates
10 March 2026
Legal updates
29 April 2025
Thoughts and opinions
8 February 2023