Start with the actual flow of personal data
We identify which data is used, for what purpose and who decides how it is processed. A payroll processor, software supplier and independent adviser do not automatically have the same privacy role.
Legal services
Privacy and compliance
Translate regulatory obligations into workable policies and controls.
Translate roles into practical arrangements
Privacy information, supplier agreements, internal policies and access rights should reflect those data flows. Personnel and healthcare data require particular care: collect and share only what is needed for the relevant purpose.
Prepare a workable breach response
A possible data breach needs prompt assessment and measures to limit harm. We help document responsibilities, notification assessment and the incident record. Not every incident requires external notification; technical investigation may require separate expertise.
Frequently asked questions
Practical questions about Privacy and compliance
When should we involve Oudshoorn?
Preferably before an agreement, investment or process change is final.
Can you coordinate international advice?
Yes. We coordinate local specialists where needed.
Do you assist with implementation?
Yes. We translate advice into agreements, records, filings and responsibilities.
Will we have one point of contact?
Yes. A lead adviser coordinates the specialists involved.
How is the scope agreed?
We agree the question, deliverables, timetable and responsibilities with you in advance.
How is the position kept current?
We identify changes and control moments that should trigger a new review.
Your contact
Would you like to discuss what this means for your organisation?
Contact the specialist connected to this subject. You will receive a clear first response and know which information is useful for a focused discussion.