04 / Data Protection & Compliance

Consider data protection where data is processed.

Websites, software and collaboration handle data in different ways. I connect an understanding of these systems with organisational workflows so data protection reflects everyday work.

Hands review organised documents on a neutral meeting table.

Typical Starting Points

  • Processing activities are not fully mapped

    New tools have been introduced without updating the overview of data types, purposes and responsibilities.

  • Documentation differs from practice

    Documented workflows no longer match the systems and permissions actually in use.

  • A new application changes data flows

    Introducing or extending a system creates new handoffs and opportunities for access.

  • Measures remain disconnected

    Technical safeguards, internal workflows and responsibilities were defined separately without a shared review.

Look at data flows, not isolated documents

Data protection reaches beyond the website. Internal applications, Microsoft 365 and business processes can also handle personal data. Consulting therefore starts with actual workflows and connects documentation with technical and organisational measures.

Glass partitions separate work areas with organised document shelving.

Data Protection & Compliance

The Relevant Services

Consider systems and organisation together

Changes to an application or workflow can also change data processing. A clear overview helps align documentation and measures with actual usage.

  1. ProcessingIdentify data, purposes and systems
  2. ResponsibilityAssign roles and workflows
  3. MeasuresAlign technology and organisation
  4. ReviewKeep track of everyday changes

A Project or Ongoing Development

A Clearly Defined Project

An initial review or support for a specific system change offers a defined starting point.

Continuous Improvement

When tools and workflows change, documentation, responsibilities and measures can be reviewed again.

Scott Nowak
Scott NowakPlanning, implementation and ongoing development

Your Personal Contact

I am Scott Nowak. Our first conversation clarifies your needs and existing environment. Business requirements and technical implementation remain part of the same discussion.

More About Scott →

Where has your data processing changed?

Describe the systems involved and your open questions. The initial conversation helps establish a useful scope for consulting.