Question 1

How does this relate to PDPL and GDPR compliance?

Accepted Answer

We govern the underlying privacy programme — data inventories, DPIAs, data subject requests and breach coordination — mapped to whichever regional frameworks genuinely apply to your organisation, including PDPL and GDPR where relevant.

Question 2

What is a DPIA and when is one required?

Accepted Answer

A Data Protection Impact Assessment evaluates privacy risk before a new or changed data-processing activity goes live. We determine when one is required and run it as part of the governed programme, not as a one-off document.

Question 3

How are data subject requests handled?

Accepted Answer

Requests are logged, tracked and actioned within the applicable regulatory timelines, with the process itself reported into your governance cadence.

Question 4

How does privacy coordination work during a breach?

Accepted Answer

Privacy notification obligations are coordinated alongside your security incident response, so regulatory timelines and affected-party communication are managed as part of the same response, not a separate afterthought.