Common situations

The work that lands on your desk and won't wait

Privacy obligations are usually understood. The work cannot keep pace because it sits with one person carrying it alongside another full-time role. These guides cover the situations that arrive without warning and carry a deadline.

Start with an audit

What these guides cover

Each guide addresses a situation with a defined trigger, a clock, and a set of things that go wrong in the first week. The material comes from over ten years working inside organizations that had to handle these situations in real time — not from a template applied after the fact.

Large firms answer the capacity gap with limited time understanding the business and a policy pack the client then has to operationalize alone, which is precisely the thing they lack capacity to do. These guides are written to be actionable before any engagement begins.

Legal is nervous about our AI launchLegal is not blocking the feature — it is blocking the absence of a record it can rely on. Here is what a completed AI privacy assessment covers and how long it takes. Our SOC 2 auditor flagged privacy gapsWhen a SOC 2 audit flags privacy gaps, some close with documentation and some require building real capability. Learn which is which and what the work involves. We just received our first DSAR. What now?A practical guide to handling your first data subject access request — deadlines, identity verification, what a response must include, and the mistakes that cause the most harm.

The gap is capacity, not understanding

Talk through your situation

An audit or gap assessment as a defined project, then a retainer to run what the assessment recommends. Fixed scope, fixed fee, four to twelve weeks.

Write to us

Prefer email? Start here.

A short note about your situation is plenty. Replies come from rasha.hisham@appliedprivacyconsulting.com.