GDPR compliance for Irish SMEs
GDPR Compliance Services for Irish SMEs
One fixed-price project that gets your data protection documentation and processes in order, with optional monthly support afterwards.
Projects from €995
- Gap analysis, policies and records of processing
- DPIAs and staff training where needed
- Fixed project price agreed upfront
- Optional monthly support from €195
Request a GDPR proposal
Business enquiries only. Tell us about your organisation and we will send a written proposal.
Prefer to talk? Call 085 804 1664.
Who this is for
SMEs that never finished GDPR
You have a privacy notice but no records of processing, retention schedule or breach procedure.
Firms facing a customer or tender questionnaire
You need to show documented data protection practices to win or keep a contract.
Businesses that have grown or changed
New systems, staff or services mean your original documents no longer match what you do.
Organisations after a breach or complaint
You want to put the gaps right and be able to show what you did.
What you get
Included
- A review of what personal data you hold and why
- A written gap analysis against GDPR
- Core documents: privacy notices, record of processing activities, retention schedule, breach and access request procedures
- Data processing agreement checklist for your suppliers
- Staff awareness session
- A prioritised action list for anything left to you
Not included
- Legal advice or representation
- Negotiating contracts with your customers or suppliers
- IT security testing or implementation
- Any guarantee of compliance
How it works
Scoping call
We learn how your business uses personal data and what you already have in place.
Written proposal
You receive a fixed price and a list of what will be delivered.
Project
We work through the review and documents with your team and hand over the finished set.
Pricing
Projects from €995
The project price depends on your size, the number of systems and the sensitivity of the data. Ongoing support after the project is optional and starts from €195 per month.
Who does the work
The work is led by Dylan Holland of Plus Promotions Limited. You deal with the same person from scoping through delivery.
What GDPR requires of an Irish SME
GDPR applies to every business that handles personal data about customers, staff or suppliers, whatever its size. The accountability principle means you must be able to show how you comply, not only say that you do.
- Records of processing. Article 30 requires a record of processing activities. The exemption for organisations with fewer than 250 employees is narrow and does not apply where processing is regular, risky or involves special-category data.
- Transparency. People must be told what you collect, why, the legal basis, how long you keep it and who receives it.
- Individual rights. Access requests must normally be answered within one month.
- Breach notification. A notifiable personal data breach must be reported to the Data Protection Commission within 72 hours of becoming aware of it.
- Processors. Suppliers that handle personal data for you need a written data processing agreement.
Questions
What does the project cover?
A review of your processing, a gap analysis, the core GDPR documents, a staff session and an action list.
What do you need from us?
One person who knows how the business runs, and access to your existing policies and supplier list.
What happens after the project?
You can run things yourself, or take monthly support for questions, reviews, DPIAs and incidents.
Can you guarantee compliance?
No. Compliance depends on what your organisation does day to day. The project gives you the documents, processes and a clear record of the steps taken.
Are you solicitors?
No. This service is provided by Plus Promotions Limited, a compliance consultancy. We are not a solicitor’s practice and do not give legal advice. If a matter needs a solicitor, we will tell you.
Related GDPR guides
- Do you need a Data Protection Officer in Ireland?
- GDPR for small businesses in Ireland
- Data breach: the 72-hour response guide
- Handling a data subject access request
- GDPR and employee data: employer guide
- GDPR consent in Ireland
- GDPR fines and the Data Protection Commission
- Privacy and cookie policies for Irish websites
Other services: Outsourced DPO · GDPR compliance projects · GDPR audit and gap analysis · DPIA support
Request a GDPR proposal
Or call 085 804 1664
Looking for help with your own data rights as an individual? Contact the Data Protection Commission.