Engagement Model

A Structured, Four-Phase Approach

Engagements are structured across four phases. Clients may engage a single phase or the full lifecycle through to the May 2027 deadline.

Phase I

Applicability scoping, data discovery and mapping, and a risk-rated gap assessment with a Board-approved remediation roadmap.

Phase II

Notices, consent architecture, policies, vendor contracts, breach playbook and the full documentation suite.

Phase III

Rights and grievance workflows, DPIA, RoPA, security controls, vendor remediation and training ahead of the 13 May 2027 deadline.

Phase IV

Annual DPIA and audit, breach support, regulatory watch, Board reporting and an annual health check.

Why It Works

Engage One Phase, or the Full Lifecycle

Most engagements begin with a Phase I diagnostic. A single Senior Partner remains accountable across all four phases.

A risk-rated view of compliance status.

The documented evidence trail regulators expect.

Rights, safeguards and vendor controls operational before the deadline.

Sustained compliance as processing and vendors evolve.