Fortis DPC offers expert GDPR, ISO, Cyber Security, and PCI DSS compliance solutions. They provide services like Data Protection Officer as a Service, GDPR audits, and EU representative services to ensure your business meets regulatory requirements.
Fortis DPC Ltd, also known as The GDPR Compliance Consultancy, specializes in providing comprehensive compliance solutions for GDPR, ISO standards, Cyber Security, and PCI DSS. They offer a range of services designed to help businesses achieve and maintain regulatory compliance, including Data Protection Officer (DPO) as a Service, GDPR Annual Audits, Data Protection Health Checks, and GDPR DSAR Support. Their expertise extends to acting as an EU Representative in Europe, ensuring businesses not established in the EU can meet Article 27 GDPR requirements. Fortis DPC aims to provide peace of mind by helping organizations navigate complex data protection laws, mitigate risks associated with data handling and cyber threats, and achieve demonstrable compliance. They cater to various needs, from landlord-specific GDPR guidance to comprehensive training and privacy notice authoring, ensuring businesses of all sizes can operate securely and compliantly. With a focus on ongoing maintenance and robust data protection postures, Fortis DPC assists clients in identifying high-impact risk areas and implementing effective strategies. Their services are crucial for businesses looking to avoid penalties, enhance their security, and build trust with customers and partners by adhering to the highest standards of data privacy and protection.
About
**Who they are** Fortis DPC (The GDPR Compliance Consultancy) provides expert GDPR, ISO, Cyber Security, and PCI DSS compliance solutions. They offer services designed to help businesses meet regulatory requirements.
**Expertise & scope** * EU Representative services under Article 27 of the GDPR, acting as a point of contact for European regulatory agencies. * Data Protection Officer (DPO) as a Service, fulfilling mandatory or voluntary DPO requirements. * GDPR Annual Audits to ensure ongoing compliance. * Data Protection Health Checks to assess an organization's current data protection posture. * GDPR DSAR Support Service to manage Data Subject Access Requests within the mandated timeframe. * Specialized GDPR services for landlords, including compliance for property portfolios. * Support for various ISO standards, including ISO 9001, 14001, 27001, 27701, 45001, and 22301.
**Reputation / proof points** * Offers services to ensure businesses meet regulatory requirements. * Provides a professional and cost-effective way to satisfy Article 27 of the GDPR.
Additional information
Fortis DPC emphasizes that GDPR compliance is an ongoing process, not a one-time event. They offer regular audits and health checks to maintain data protection standards. Their services are structured to assist organizations that may not have a physical presence in the EU/EEA, enabling them to appoint a representative for their data protection interests. This ensures that inquiries from European regulatory agencies can be addressed reliably and professionally, regardless of the UK's departure from the European Union.
Key Highlights
Provides EU Representative services to satisfy GDPR Article 27 requirements for organizations without an EU/EEA presence.
Source
“The EU GDPR requires organisations that are regulated by the GDPR must be represented in the EU/EEA. If there is no physical presence in the EU/EEA, then a the business can appoint a body to represent their data protection interests in Europe.”
Offers Data Protection Officer (DPO) as a Service to meet mandatory or voluntary DPO requirements.
Source
“The GDPR Compliance Consultancy can provide the role of GDPR Data Protection Officer, DPO as a service for organisations.”
Specializes in GDPR DSAR Support Service to help organizations respond effectively to Data Subject Access Requests within the 30-day timeframe.
Source
“The EU and UK GDPR requires you to respond quickly and effectively to requests. To be precise, 30 days to requests from individuals about their personal data.”
Provides GDPR compliance solutions including annual audits and data protection health checks.
Source
“Businesses evolve, grow, move and change over the period of a year. Therefore, it is vital that your GDPR status is reviewed at least once very twelve months.”
Certifications & Trust Signals
Offers expertise in various ISO standards including ISO 9001, ISO 14001, ISO 27001, and ISO 27701.
Source
“ISO 9001 Services
ISO 14001 Services
ISO 27001 Services
ISO 27701 Privacy Information Management”
Buyer Snapshot
Best for
Organizations needing an EU GDPR Article 27 Representative.
Businesses requiring outsourced Data Protection Officer (DPO) services.
Companies seeking to ensure ongoing GDPR compliance through audits and health checks.
How engagement typically works
Provides a professional and cost-effective approach to compliance.
Offers expert support for responding to regulatory inquiries.
Typical deliverables
Appointed EU Representative for GDPR Article 27 compliance.
DPO as a Service.
GDPR Audit reports.
Data Protection Health Check assessments.
Managed DSAR response process.
Good to know
Best when organizations require specialized GDPR and data protection expertise.
HQ: Cobham, GB
Languages: English
Timezones: Europe/London
Claim status: Listed
Services & Capabilities
GDPR Article 27 EU/UK Representative
Jurisdictions: EU
Onboarding time: 2–5 days
Pricing model: Retainer
Included services: Regulator contact point, DSAR forwarding, Compliance support
Coverage: GDPR, ISO 9001, ISO 14001, ISO 27001, ISO 27701, ISO 45001, ISO 22301, Cyber Security, PCI DSS, Data Protection, AI Compliance, DefStan 138, DefStan 139
Supports Special Category Data: Yes
Supports Children Data: Yes
Supports Health Data: Yes
Dpa Available: Yes
Dsar Workflow Support: Full managed
Regulator Comms Handling: Full handling
Pricing Basis: custom
Supports Biometric Data: Yes
swiss_fadp_rep
Jurisdictions: CH
Pricing model: Retainer
Starting from: CHF 300
Included services: FADP Article 14 representative, Swiss data protection representative
dsa_art13_rep
Jurisdictions: EU
Pricing model: Retainer
Starting from: EUR 300
Included services: DSA Article 13 legal representative, EU Digital Services Act representative
Additional gdpr_art27_rep Details
Coverage Details
EU
Onboarding Steps
Offers a free one-hour meeting to discuss GDPR needs.
EU EEA Establishment
The service is designed for organizations that may not have a physical presence in the EU/EEA, acting as their representative within Europe.