Consulting · Data Protection and AI Risk Assessments
Spot the risks before a new system goes live.
Before you launch a new system, process or AI tool, we assess the risks to people's data and to your organisation, and record how you'll manage them.
- UK GDPR
- ICO DPIA guidance
- ISO/IEC 23894
- EU AI Act
Sound familiar?
Signs it’s time to look at this
You're launching a new system, app or process that uses personal data.
Someone has asked whether you've done a DPIA, and you're not sure.
Staff want to use a new AI tool and you need to decide whether it’s safe.
You're using AI to make or support decisions about people.
What we cover
What’s included
Data Protection Impact Assessments
UK GDPR requires a DPIA before processing that's likely to be high risk. We work out whether you need one, carry it out with your team and record the steps you'll take.
AI risk assessments
For each AI tool or use, we look at what data it uses, what could go wrong, who could be affected and which controls you need.
How it works
From “we think we’re fine” to “here’s the proof”
Four steps. At each one, you know what's happening, what it costs and what you'll get.
- 01
Free scoping call
Thirty minutes on your data, your AI use and what a first assessment would look like. No obligation.
- 02
Assessment
For every control we ask two questions: are you doing it, and how well? If you can't show evidence, the score can't go above a set level. Every score explains how we reached it.
- 03
Your report pack
Four clear documents, signed off by a qualified person, so you know where you stand and what to do next.
- 04
Fix, then stay in control
We help you close the gaps, most urgent first, then keep checking in so they stay closed.
What’s in your report pack
Where you stand
Your current position, with a confidence level on every score.
Action plan
What to fix first, across people, process and technology.
Risk register
The risk behind each gap, and who owns it.
Evidence pack
Audit-ready, signed off, with the working shown.
How we score maturity
Level 3 is the line between describing a control and proving it.
1
Unsupported
Nothing in place yet.
2
Asserted
You say it happens, but there's no proof.
3
Evidenced
You can show it happens.
4
Measured
You track how well it works.
5
Sustained
It keeps working, and keeps improving.
Often paired with
Data Governance
Data you can rely on: lawful, protected and provable.
Questions
Straight answers
The things people usually ask us first. If your question isn’t here, just ask.
Not sure where you stand? Let’s find out in 30 minutes.
A free, no-obligation call about your data and your AI use. You’ll leave with a clearer picture either way.