Privacy & Information Security Consultancy Services

As London-based GDPR compliance consultants working with organisations across the UK, we can help you comply with the UK GDPR and the Data Protection Act 2018 (and the EU GDPR where it applies) by scoping your compliance project, reviewing and auditing your current programmes, act as your DPO or UK privacy representative, set robust incident response plans and advise on any privacy and information security compliance issues.

You get years of practitioner experience and an approachable attitude — best-practice, pragmatic advice directly from the person doing the work.

GDPR challenges

Managing personal data fairly, lawfully and transparently has been a legal requirement in the UK since the Data Protection Act of 1998, GDPR expands on the main principles and brings additional requirements like demonstrating board accountability and keeping data processing documentation. Personal data is no longer a company’s asset but a risk that needs proper management. Although experts have described this legislation as ambitious, exceptionally complex and harsh, applying the correct controls will help your business grow and build customer relationships based on trust. Each business will have changes to make in their policy, processes and business contracts, as well as in technical and organisational compliance. In many cases, the required changes could be complex and significant.

Serious infringements can be fined up to £17.5 million or 4% of annual worldwide turnover under the UK GDPR (whichever is higher), and up to €20 million or 4% under the EU GDPR.

How Real Code can help with your GDPR compliance and privacy programme

We offer a DPO, a UK data representative and all aspects of privacy compliance services. Real Code can help your business with a variety of best-practice solutions, from evaluating your position in relation to GDPR compliance and building a roadmap, to compliance through to implementation of a best-fit data compliance framework tailored to your individual business, with advice informed by standards such as BS 10012, ISO/IEC 27001:2022 and ISO/IEC 27701:2025.

Why choose Real Code Ltd GDPR Consultants?

We understand the challenges small and medium-size companies face very well. Every business is different and we offer proportionate compliance programmes. The Real Code approach is to tailor the solution for you to meet GDPR with comfortable changes to your established processes. We do not shoe-horn you into a proprietary solution that might not fit well with your business or culture.

• We have a qualified in-depth understanding of the requirements of GDPR and how to comply with them.
• Extensive international data protection and information security management experience.
• Our consultancy proposals have fixed prices, so you won't get any unexpected surprises.
• Extensive range of GDPR services and security assessments, depending on the progress of your compliance programme.
• Data protection work is supported by an associate certified by the IAPP (CIPP/E, CIPM, CIPT, FIP) and ISACA (CISM).
• Improve your business' overall operational and information security procedures.
• Improve security awareness — legal, IT, HR and other business functions must all be involved, with executive support.

The GDPR Audit / Gap Analysis would typically include: Submission of briefing notes and initial GDPR data capture document for the nominated representatives to complete prior to GDPR interviews; Undertaking GDPR interviews with key functional representatives, to establish existing processes, practices and controls in place for personal data and comparing these against the GDPR requirements, e.g. in relation to: Data Protection Principles Rights of Data Subjects Controller & Processor Obligations Transfer of data to third countries and/or international organisations -e.g.: Following the GDPR Gap Analysis interviews, we will produce a summary report, presentation of findings and recommendations as well as an associated GDPR Action Plan.

Request a call back

Book an appointment

You’re uncertain how much your organisation complies with the GDPR

Get your detailed assessment showing your organisation’s current position regarding GDPR compliance, and your plan to address the gaps and risks. Click here to speak to an expert now

You’re not sure what personal data you hold or where it is stored

Get an inventory of the personal data held and shared by your business, and a data flow map of your organisational processes. Click here to speak to an expert now

You don’t know the data protection risks of introducing new systems or processes

Get an assessment of the data protection risks associated with your new process and a plan to mitigate discovered risks. Click here to speak to an expert now

You need help to implement your business GDPR compliance project

Get support adapting your existing data protection programme towards the UK GDPR. This includes:

• Data protection frameworks
• Policies and procedures
• Data processor management
• Information security
• Incident management
• International data transfers
• Compliance documentation

Click here to speak to an expert now

GDPR Training Pricing

Price per session, multiple sessions available per day. Please contact us to schedule training for your employees, our online post-training test with printable certificate offers proof that your employees have achieved a suitable understanding of the principles of GDPR.

Our leading data protection consultants will work closely with you to implement organisational and technological controls which can significantly reduce your data protection and cyber security risks, and enable compliance with any applicable UK, EU (including the EU General Data Protection Regulation) and international data protection laws and best practice standards.

Data Protection & Information Governance courses are delivered by an accredited data protection consultant following a methodical, systematic learning path to give you the specialist knowledge, skills and qualifications that will help your organisation accomplish and maintain compliance with GDPR, Information Governance and Compliance Auditing.

To book a session or discuss our training please contact us.

Frequently Asked Questions

Are GDPR fines insurable?

Generally not in the UK. A 2018 review of 30 European jurisdictions by Aon and DLA Piper found GDPR fines insurable in only two (Finland and Norway), generally not insurable in 20 (including the UK) and unclear in eight. Insurance law changes, so check your position with your insurer and a solicitor.

Do you offer GDPR compliance consultancy in London?

Yes — Real Code is a GDPR compliance consultancy based in London (EC2A), and we deliver most engagements remotely to organisations UK-wide. Whether you need a one-off compliance audit, an outsourced DPO, or staff training, you deal directly with the consultant doing the work.

Can GDPR be applied retrospectively?

You need to look carefully at all of your existing data processing activities to ensure you are compliant. Let’s say you use customer data for marketing purposes. Do you have specific consent for this? Is that consent clear, prominent, opt-in, documented and easily withdrawn? If not, you must improve your existing mechanisms to meet the UK GDPR.

How GDPR works

GDPR is designed to give individuals better control over their personal data. The EU GDPR sets one set of rules across the EU and EEA; the UK has its own version, the UK GDPR, which applies alongside the Data Protection Act 2018.
Organisations outside the EU can be subject to the EU GDPR when they offer goods or services to people in the EU or monitor their behaviour, whatever those people's nationality.

Where to start with UK GDPR compliance

Know the key concepts and articles regarding GDPR
Next steps for UK GDPR compliance: use tools such as those on https://www.smesystem.co.uk for this.
Assess GDPR compliance and decide which steps to take next in order of ease and priority.
Website adjustments, adjust your site to make it compliant with the law, Real Code Ltd can help with this.
Discuss your GDPR compliance issues to consider with a qualified professional
Monitor and audit your data acquisition, usage and storage ongoing using tools such as those on https://www.smesystem.co.uk