Protect personal data. Prove that you do.
Cybergen helps you understand how personal data moves through your organisation, secure it properly and demonstrate accountability, from gap assessments and DPIAs to supplier reviews and ongoing support.
Illustrative example only, not real data
GDPR is about people, process and security
Data protection law asks organisations to demonstrate compliance and to protect personal data with appropriate technical and organisational measures. That reaches well beyond IT: data mapping, privacy notices, rights requests, breach processes and supplier agreements all play a part.
Cybergen focuses where privacy and security meet. For specialist legal questions, we work alongside qualified data protection practitioners and solicitors, so you get joined-up advice.
The obligations are real and specific
to report a qualifying personal data breach to the ICO, where feasible
maximum UK GDPR fine: the higher of 4% of global annual turnover or £17.5 million
for processing likely to result in a high risk to individuals
Source: Information Commissioner's Office (ICO) guidance on UK GDPR
Protection at every stage
Personal data is exposed differently as it moves through your organisation. We look at each stage and the principle that applies.
When a breach happens, the clock is already running
Data protection services built around security
Data protection gap assessment
Review current practices against UK GDPR and identify priorities, from data mapping to breach processes.
GDPR security assessment
Assess access control, encryption, retention, monitoring and incident response for personal data.
DPIA support
Help assess the privacy and security risks of a new system, supplier or AI initiative.
Supplier data protection review
Assess how third parties handle the personal data you share with them.
Breach response planning
Playbooks and exercises so you can assess and report a breach within 72 hours.
Ongoing privacy and security support
Periodic reviews and help with new projects as your organisation changes.
Organisations that hold data people care about
From discovery to demonstrable accountability
Discover
Map personal data, systems, suppliers and current practices.
Assess
Review controls and processes against UK GDPR requirements.
Prioritise
Agree a practical plan based on risk to individuals.
Support
Help implement, evidence and review improvements.
Is GDPR just a legal issue?
No. It covers legal, process and technical areas. Article 32 requires appropriate security for personal data, which is where Cybergen focuses. We work alongside legal specialists where needed.
When is a DPIA required?
When processing is likely to result in a high risk to individuals, for example large-scale processing of sensitive data, new technologies or systematic monitoring. A DPIA is good practice for many other projects too.
How quickly must we report a data breach?
A reportable personal data breach must be notified to the ICO within 72 hours of becoming aware of it, where feasible. Individuals must be told without undue delay if there is a high risk to them.
Does Cybergen act as our Data Protection Officer?
We provide privacy and security advice and support. Where you need a formal DPO or legal opinion, we can work with qualified partners.
Can you review our suppliers?
Yes. We assess how suppliers protect the personal data you share and help you set proportionate requirements in contracts.
Make data protection a strength.
Tell us about the personal data you handle and your concerns. We will recommend a proportionate next step.
Thanks, we've received your enquiry
A member of our team will be in touch shortly.