Skip to main content
Loyca
Service reference 19Governance & ComplianceACTIVE PRACTICE PROTOCOL

Data Protection & Privacy

Data protection law, handled properly

Compliance with the GDPR and equivalent privacy law: mapping, DPIAs, notices, subject rights, and supervisory authority registration.

Request Scoping QuoteBook 30-Min Technical Triage

PROTOCOL OVERVIEW

Executive Context & Technical Scope

The Act gives the supervisory authority real enforcement powers, and enforcement has begun. We map what personal data you hold and why, establish lawful bases, run DPIAs on high-risk processing, write notices people can understand, and build the process for handling subject access requests within the statutory timeline.

TARGET PROFILES

Who Requires This Protocol

Any organisation processing personal data
Data controllers and processors required to register with a supervisory authority
Companies serving EU customers alongside domestic ones

ENGAGEMENT ARTIFACTS

Verifiable Outputs & Deliverables

Data inventory and processing register (ROPA)

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

Lawful basis analysis and consent mechanism review

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

DPIAs for high-risk processing

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

Privacy notices, subject rights procedure, and breach notification playbook

Delivered under strict NDA with executive presentation and engineering remediation roadmap.

PRACTITIONER FAQ

Frequently Asked Scoping Questions

Do we have to register with a supervisory authority?
Registration obligations depend on your size and processing activities. We assess whether you qualify and handle the submission if you do.
How long do we have to report a breach?
Notification to the Commissioner is required within 72 hours of becoming aware where the breach presents a real risk to data subjects. The playbook we build assumes you will need it at an inconvenient hour.
PRACTICE CONTINUUM

Related Cybersecurity Protocols

INTELLIGENCE WITHOUT LIMITS

Scope Data Protection & Privacy for your organization.

Get a fixed-scope proposal, verifiable deliverables list, and exact timeline for data protection & privacy.

Request Scoping QuoteBook 30-Min Consultation
Direct Hotline:+254 740 658 068
NO-OBLIGATION GUARANTEE

What to expect in your scoping call

  • Direct Senior Lead

    You talk to a seasoned cybersecurity consultant, never a sales script.

  • Strict Confidentiality

    We operate under mutual NDA before discussing sensitive architecture.

  • Actionable Next Steps

    Immediate priorities and costed options, whether you engage us or not.

Message Loyca on WhatsApp