GDPR & Data Protection Services

Data Protection Health Check

A practical review of your current GDPR position, identifying key gaps, risks and priority actions.

Data Protection Health Check

Overview

The Data Protection Health Check provides you with a clear picture of how effectively your organisation is currently managing their data protection responsibilities. OSP reviews key areas of governance, documentation and day-to-day practice to identify where controls are working well and where improvements may be required.

Rather than carrying out a lengthy formal audit, the Health Check is designed to be a practical and proportionate assessment. Your organisation receives clear findings and prioritised actions, helping management understand where attention should be focused and what improvements can realistically be made.

Enquire using the form here and one of our DPOs will get back to you today.

Services Enquiry Form

Please Note: We need to collect your information to respond to your request. You can read more about what we do with the information we collect and how we use it in our privacy policy.

Name *

First

Last

Email *

Organisation *

Service type you are enquiring about *

Any notes you want to add?

This service is for:

SMEs without an internal data protection specialist
Organisations unsure whether their current GDPR arrangements are sufficient
Businesses that have not reviewed their data protection practices recently
Organisations preparing for customer, supplier or regulatory scrutiny
New management teams wanting assurance over existing arrangements
Businesses wanting a starting point before investing in further compliance work

OSP will:

Issue a short pre-assessment questionnaire
Hold a discovery meeting with relevant personnel
Review an agreed set of key documents, such as policies, privacy notices, processing records and breach procedures
Assess areas including governance, accountability, individual rights, retention, DPIAs, breaches and staff awareness
Identify gaps, weaknesses and areas of good practice
Produce a simple RAG-rated or maturity-based summary
Provide a prioritised action plan
Hold a findings meeting to talk management through the results

You will:

Complete the initial questionnaire
Provide relevant existing documents
Nominate someone who understands current data protection arrangements
Attend the discovery and findings meetings

Typical delivery:

1–2 weeks from receipt of the required information, involving approximately 1–2 days of OSP consultancy time

Service takeaways:

Data Protection Health Check report
Prioritised action plan
Service badge and certificate

Our Other

GDPR Services

Data Protection Policy Review

A structured review of your existing data protection policies to ensure they remain clear, current and appropriate.

DPIA Review Clinic

Expert review of an existing or planned Data Protection Impact Assessment, with practical guidance on gaps and improvements.

Privacy Notice & Cookie Review

A focused review of your privacy notices, cookie information and consent arrangements to identify areas requiring improvement.

Data Breach Readiness Workshop

A practical workshop to test how effectively your organisation could recognise, manage and respond to a personal data breach.

Data Retention Review

A practical review of how long personal data is kept, why it is retained and where improvements are needed.