Data Privacy and Security Services

We provide end-to-end data compliance advisory across POPIA, GDPR, CCPA and global privacy frameworks. Our team assists with data governance, breach response, cybersecurity policy development, vendor assessments, PIAs, and ensuring lawful processing of personal information across digital platforms.

Including:

  • Regulatory compliance across POPIA, GDPR, CCPA, HIPAA and international privacy frameworks

  • Privacy Impact Assessments (PIAs) to identify, assess, and mitigate data processing risks

  • POPIA compliance programmes, Information Officer training, gap analysis, and DSR protocols

  • Drafting of website, employee, and third-party privacy policies

  • Cybersecurity legal advisory, breach readiness planning, and incident response guidance

  • Vendor, cloud service, and processor risk assessments

  • Staff training, executive briefings, and Information Officer workshops

  • Contractual privacy risk management, DPAs, and cross-border transfer compliance

  • Breach notification support and regulatory liaison after data incidents

  • Data governance frameworks, ROPA documentation, retention & deletion policies

  • Advisory on CCTV, biometrics, AI governance and algorithmic transparenc

1. Regulatory Compliance Advisory

  • POPIA (South Africa)
  • GDPR (EU)
  • CCPA (California)
  • HIPAA (US – health-related data)
  • Cross-border data transfer compliance

2. Privacy Impact Assessments (PIAs)

  • Evaluate data processing activities
  • Identify and mitigate privacy risks
  • Assess third-party processor risks

3. POPIA Compliance Framework

  • Appointment and training of Information Officers
  • Internal POPIA audits & compliance assessments
  • Gap analysis & compliance roadmap
  • Data Subject Request (DSR) response protocols

4. Privacy Policy Drafting

  • Website privacy policies
  • Internal employee data protection policies
  • Third-party processor agreements

5. Cybersecurity Legal Advisory

  • Incident response & breach notification compliance
  • Security policy development
  • Vendor & cloud services risk assessments

6. Training and Awareness

  • Tailored employee training sessions
  • Executive and board-level briefings
  • Information Officer workshops

7. Contractual Risk Management

  • Data processing agreements (DPAs)
  • Cross-border transfer clauses (Standard Contractual Clauses)
  • IT & SaaS contract privacy provisions

8. Breach Response and Legal Support

  • Legal advice during data breaches
  • Liaison with regulators (Information Regulator SA)
  • Drafting breach notifications to data subjects & authorities

9. Data Governance and Retention

  • Data classification & lifecycle management
  • Record of processing activities (ROPAs)
  • Retention & deletion policies

10. Technology and Surveillance Law Advisory

  • CCTV & employee monitoring policies
  • Biometric data compliance
  • AI & algorithmic transparency frameworks