Free resources

Find out how you compare with organisations of your size or industry with this years GDPR report, based on gap analysis findings

Download now

Download our case study with Air Ambulance Charity Kent Surrey Sussex to understand how a thoughtful approach to data protection compliance has enabled its team to innovate in an extremely regulated industry.

Find out how our bespoke consultancy service can be the perfect, flexible solution for organisations that require extra support for a wide range of data protection-related projects.

Download now

  Delivered by: Mark James, GDPR Consultant, DQM GRC

AI has transformed how organisations operate – but also presents a minefield of compliance challenges.

Data protection laws like the GDPR (General Data Protection Regulation) have shone a spotlight on how organisations handle personal data, particularly when deploying AI systems.

Privacy consultant Mark James warns:

“AI systems can lack transparency in how they make decisions, leading to bias, discrimination and significant data privacy risks.”

Download now

Download our free white paper to understand the ICO’s (Information Commissioner’s Office) framework on AI, including:

• What data processors and controllers using AI need to consider;
• Integrating AI systems with privacy by design in mind;
• Data security measures for AI systems;
• AI ethics and reliability;
• Relevant regulatory frameworks (including an in-depth look at the GDPR);
• The future of data privacy and AI, including emerging tools; and
• How to implement a robust AI and data protection strategy.

Download now

An organisation’s database is a valuable asset and should be treated as such, with specific attention paid to the risk of data being stolen or lost. In addition to normal data protection and information security practices, you should be aware of the many threats to data security, and the implications of data loss and how to prevent it.

Download our white paper to read about why your data is so valuable, how internal training on data value and reviewing suppliers can help, and our top 12 tips on what you can do to protect your data.

Download now

Written by in-house data protection Louise Brooks, this guide explains all you need to know about the new data protection bill currently in parliament. It is the second version of the Bill, introduced in March 2023.

Download to find out:

• What is the DPDI bill?
• How does a bill become law in the UK?
• Where is it in the parliamentary process?
• A summary of the changes most likely to affect our customers and what affect they will have
• Our opinion on the bill

Download now

Aim higher than compliance. Build customer trust.

After more than 20 years in data protection, we understand the challenges our large-business customers face. We develop our services to support you through those challenges.

Read our brochure to find out how we can best support your business to not only maintain data protection compliance but also build customer trust through best-practice data protection.

Depending on your cookie preferences, our forms may not display properly. If you have any issues downloading our resources, please email sales@dqmgrc.com and we will gladly send you a copy.

Download now

This paper discusses:

• What privacy by design is;
• The seven foundational principles of privacy by design; and
• An eight-step approach to implementing privacy by design.

Download now

Discover the requirements for privacy by design in UK law, and how to implement privacy by design while overcoming its challenges.

Download now

In this guide, we explain when you need to conduct a DPIA (data protection impact assessment), why they are necessary and take you through a step-by-step guide to conducting one.

Download now

Organisations of all sizes rely on data protection policies and procedures to conduct data processing operations in a consistent and effective manner. All too often, however, these critical documents do not evolve with the business, eventually becoming a source of risk.

Read this paper to understand:

• Why it is important to periodically review data protection policies and procedures;
• How to conduct effective reviews; and
• How to effectively plan changes.

Download now

An organisation’s database is a valuable asset and protecting it from theft is essential. Our “A Quick Guide on How to Prevent Data Theft” is a succinct explanation of how data seeding can help prevent data theft and track the data’s use should it be stolen.

Download now

Delivered by:

• John Potts, Operations Director, GRCI Law
• Cliff Martin, Cyber Incident Responder, IT Governance
• Martin Fletcher, Consultant, DQM GRC

According to Mimecast’s State of Email Security 2020 since the pandemic began, phishing attacks have increased in 63% of organisations. In addition, Verizon's 2021 Data Breach Investigations Report found that 36% of data breaches involved phishing, and 85% of breaches involved a human element.

With organisations at risk now more than ever, this flash briefing outlines the steps to take following a data breach in order to minimise losses and protect your organisation’s reputation, as well as comply with relevant data protection legislation such as the GDPR.

Our privacy and cyber incident response experts discuss:

• Examples of what constitutes a data breach regarding UK and EU residents’ data under the GDPR;
• What steps you should take following the discovery of a data breach, including engaging our cyber incident response team; and
• What help is available and how you can mitigate the effects of a future breach if you act now.

Download now

Cookies are small files that collect information about you when you visit a website. There are certain laws around the use of cookies, such as requiring consent to drop certain types of cookies. Our free infographic gives you a basic overview of the different types of cookies, helping you better understand how using or accepting cookies may affect you.

Does your website use cookies? Our GDPR Cookie Compliance Service can help ensure your organisation’s use of cookies complies with the law.

 Find out more about the GDPR Cookie Compliance Service

Download now

The way UK organisations collect and use cookies is regulated by the GDPR (General Data Protection Regulation) and the PECR (Privacy and Electronic Communications Regulations). You can make sure your organisation meets its data protection and privacy requirements with respect to cookies by following our checklist.

It provides guidance on:

• Which laws apply;
• Assessing what cookies you have in place;
• Cookie banners;
• What should be in your cookie policy; and
• What to do if you need more help.

Download now

In this paper, we cover:

• An introduction to the GDPR, how it stands post-Brexit, and a summary of its impact on UK business;
• The nine pillar plan – DQM GRC’s way of examining an organisation’s GDPR compliance position and creating a plan to improve it; and
• How creating a GDPR ‘readiness pack’ could improve your likelihood of winning future business.

Download now

Organisations often suffer because of vulnerabilities in their supply chains.

In this infographic, we take a look at:

• Why you need to manage supply chains;
• How to assess your supply chain;
• The state of supply chain attacks; and
• How you can get guidance on your supply chain audit.

Download now