vDPO for UK-based Market Research Consultancy
Risk Management Consulting
 
 
Xcina Case Study

Virtual Data Protection Officer (vDPO) for UK-based Market Research Consultancy

The client

A UK based market research and customer consultancy helping to build brands, track and improve customer engagement and satisfaction. The company runs market research campaigns for a large number of international clients, across a number of industry sectors, dealing with millions of personal data records from clients as well collecting data directly.

The work

Following the implementation of the General Data Protection Regulation (GDPR), the company had reviewed its obligations and decided that they should appoint a Data Protection Officer. To ensure that adequate resource and knowledge was assigned to the role they engaged Xcina Consulting as their Virtual Data Protection Officer (vDPO).

How we helped

We undertook a review of the data protection policy and procedures to assess adequacy and ensure compliance against GDPR. We consulted on the design and implementation of several controls to minimise and segregate legacy data. We also supported the completion of privacy impact assessments on new projects that had been requested by clients, including new forms of processing, and assisted by liaising between the company, their clients and customers, where specific data protection requests or queries had been raised.

Value added

We provided the client with GDPR/Data Protection knowledge and support to ensure they met their legal obligations and support the legal and regulatory obligations of their customers.

Industry and sector:

Professional Services

Solutions and service area:

What our clients say

"Xcina is always responsive to any question we have during the time we are implementing data protection remediation activities, they keep us informed and understand what we need and what we’re trying to do. "

Getac Technology Corp, Legal Affairs Center

"Xcina is always responsive to any question we have during the time we are implementing data protection remediation activities, they keep us informed and understand what we need and what we’re trying to do."

ParkMobileUK, Managing Director

"Xcina Consulting performed an annual review of our card data environment, and ensured that we are compliant with the PCI-DSS. We continue to work with their experienced QSAs, leveraging their guidance and best practices so we have the highest possible level of security controls in place."

DKB Brands, Data Protection Officer

"Xcina really helped us to kick start our data protection compliance process. They took the time to speak to all departments of the business and outlined our highest risk to lowest risk areas. The insight and guidance they provided was essential for our business to become GDPR compliant."

Portman Settled Estates Limited, Estate Secretary

"Xcina’s ongoing support has ensured that our employees feel confident when dealing with data protection matters, with best practice knowledge and expertise from consultants who have taken the time to get to know our business and our industry."

National Bank of Kuwait, Compliance Officer

"Xcina worked with us on a number of data protection matters, including subject access requests and gave helpful, practical advice which reflected their understanding of technology issues as well as legal matters."

Your World Recruitment, Group IT Director

"We have worked with with Xcina successfully for two years, initially on internal GDPR GAP analysis. We now have them engaged as our ‘Virtual DPO’ provider and regularly receive useful, pragmatic and, more importantly, actionable advice on all areas of Data Protection."

Quadrangle Research, Group Chief Operating Officer

Discover how we have supported businesses like yours >>

Subscribe to Updates

Receive regular updates from our expert consultants as they provide clarification and guidance on issues impacting your organisation.

Subscribe >>