GDPR & Data Protection Services

Privacy Notice & Cookie Review

A focused review of your privacy notices, cookie information and consent arrangements to identify areas requiring improvement.

Privacy Notice & Cookie Review

Overview

Privacy information is often one of the most visible parts of an organisation’s data protection arrangements. Notices need to accurately explain how information is being used, while website cookie information and consent arrangements should reflect what is actually happening on the site.

OSP provides a focused review of existing privacy notices and cookie arrangements, identifying outdated wording, missing information, inconsistencies and areas that may require improvement.

Enquire using the form here and one of our DPOs will get back to you today.

Services Enquiry Form

Please Note: We need to collect your information to respond to your request. You can read more about what we do with the information we collect and how we use it in our privacy policy.

Name *

First

Last

Email *

Organisation *

Service type you are enquiring about *

Any notes you want to add?

This service is for:

Organisations whose privacy notice has not been reviewed recently
Businesses launching or redesigning a website
Organisations that have introduced new systems or data uses
Marketing and communications teams
SMEs using generic privacy or cookie templates
Organisations wanting reassurance over their public-facing privacy information

OSP will:

Issue a short pre-assessment questionnaire.
Hold a discovery meeting with relevant personnel.
Review an agreed set of key documents, such as policies, privacy notices, processing records and breach procedures.
Assess areas including governance, accountability, individual rights, retention, DPIAs, breaches and staff awareness.
Identify gaps, weaknesses and areas of good practice.
Produce a simple RAG-rated or maturity-based summary.
Provide a prioritised action plan.
Hold a findings meeting to talk management through the results.

You will:

Complete the initial questionnaire.
Provide relevant existing documents.
Nominate someone who understands current data protection arrangements.
Attend the discovery and findings meetings.

Typical delivery:

1–2 weeks from receipt of the required information, involving approximately 1–2 days of OSP consultancy time.

Service takeaways:

Data Protection Health Check report
Prioritised action plan
Service badge and certificate

Our Other

GDPR Services

Data Protection Health Check

A practical review of your current GDPR position, identifying key gaps, risks and priority actions.

Data Protection Policy Review

A structured review of your existing data protection policies to ensure they remain clear, current and appropriate.

DPIA Review Clinic

Expert review of an existing or planned Data Protection Impact Assessment, with practical guidance on gaps and improvements.

Data Breach Readiness Workshop

A practical workshop to test how effectively your organisation could recognise, manage and respond to a personal data breach.

Data Retention Review

A practical review of how long personal data is kept, why it is retained and where improvements are needed.