Most organisations have spent precious time and resources on putting in place procedures to become compliant with the GDPR, and a good percentage will now be fairly confident that they are doing a reasonable job in that area. But only a few are rigorously testing their own compliance.

Data protection compliance is not just about what you have put in place, but also what it looks like from the receiving end, to the people you interact with.

• Are all the right documents and links in the right place?

 

• How are the data subject requests such as 'The Right of Access' or 'Right to Erasure' handled by your staff, and are these being carried out in a timely manner?

 

• Is your unsubscribe process, and that of any third-party landing pages, clear and effective?

How DP:Monitor can give you that peace of mind
​

DP:Monitor is a service which identifies any issues with your data protection setup, recommends fixes and is an ideal way of monitoring your data protection compliance.

We insert email 'trackers' into your database so that we can objectively route emails from your marketing to an expert compliance team who check and monitor everything for you, identifying issues and recommending fixes. 

It’s a classic 'mystery shopping' approach with all the benefits of objectivity, real-time and monthly reporting, low operational impact and high compliance value.

DP:Monitor is not software or an app - it's a supporting service which fits neatly alongside your marketing and involves minimal burden on your organisation or Data Privacy Officer.

DP:Monitor checks that:
​

• Emails are being sent out meet compliance standards
• Data subjects rights are being adequately supported when exercised
• All the links in the email communications are working
• Privacy policies linked to emails are adequate

We also monitor and trap any unauthorised use of your marketing data (a data breach)

Phase 1

• Meeting with you and your staff to discuss the data compliance regime that you have in place - who controls and who processes data and how you use data
• Compliance tests which reflect the latest standards in international privacy legislation
• Setting up the email trackers

Phase 2

• Monitoring of the marketing communications experience of the trackers with your organisation for a fixed period, usually six months
• Monthly reports on the communications, presented electronically or face-to-face
• Reporting urgent compliance failures or data breaches within one working day
  
• Expert advice on any aspect of data protection throughout the programme

Ongoing support
​

Beyond an initial DP:Monitor programme, further support is available if you would like to continue to benefit from DP:Monitor.

We advise that the process is repeated especially after a significant change in marketing strategy, such as breaking into a new market area or region. Some of our customers opt for continual monitoring, with regular reports to enable to them to keep a constant eye on their data compliance regime. 

In practice

Find out how our findings and advice reassured a DPO that the processes and procedures that he had put in place were working effectively:

Putting dP processes to the test

Get in touch