UK GDPR and data protection

Our data protection solicitors turn UK GDPR into practical steps for your business: privacy notices, data processing agreements, subject access requests and breach response, handled by a solicitor who knows how you operate.

tick yellow Included in our subscription plans
what we handle

The data protection issues we handle most often

Most UK GDPR problems don't start with a breach. They start with a contract, a customer email or a new tool. These are the ones we see most weeks at Lawyerly.

A subject access request has landed

We check the deadline, scope the search and prepare a response that discloses what it should and withholds what it can.

A customer wants a DPA signed

We review or draft the Data Processing Agreement, check the transfer terms and make sure you are not taking on liability that belongs to the other side.

You suspect a personal data breach

We help you contain it, decide within 72 hours whether the ICO needs to know, and handle the notification and the people affected.

data protection solutions

How we help you comply with UK GDPR

Data protection is not a one-off project. Every new hire, supplier, marketing campaign and software tool changes what personal data you hold and why. We build a compliance position that fits the size of your business, then keep it current as you grow.

When something does go wrong, whether that is a complaint, an access request or a breach, you already have a solicitor who knows your data and can act the same day. 

Data protection audit and gap analysis

We map what personal data you hold, where it flows and which lawful basis you rely on, then set out the gaps in a plain, prioritised list.

Policies, notices and agreements

Privacy notices, cookie policies, data processing agreements, retention schedules and staff data policies, drafted for how your business actually works rather than downloaded from a template.

Requests, complaints and breach response

We handle subject access requests, erasure requests and complaints on your behalf, and manage ICO notifications and communications with affected individuals if a breach occurs.

Why work with us

Finally, legal support that keeps up

With Lawyerly, it stops being a worry, and becomes an advantage.

  • Senior expertise

    We pair you with one of our qualified solicitors whose expertise and experience fits your business.

  • On-demand legal support

    Work with your legal professional through our online Client Hub. Wherever you are, whenever you need us.

  • Predictable fees

    Pay a monthly subscription or a fixed fee for one-off work. The price is always agreed before we start.

Meet our commercial solicitors

Big-firm expertise in your corner

Our commercial solicitors have worked at top-tier law firms and global legal departments, the kind of senior legal team most SMEs can't justify building in-house.

Patricia Tinn

Legal Service Director

James Conning

Commercial Solicitor

Ashrelle Parker-Belgrave

Commercial Solicitor

Dr Jackie Nagtegaal

Co-Founder & Director

Willem van der Merwe

Co-Founder

Jan Nagtegaal

Director

Knowledge hub

Frequently asked questions

Answers to the questions we hear most often, on how the subscription works, what it covers and how we charge.

Everything a growing business needs to comply with UK GDPR and the Data Protection Act 2018 without hiring a specialist. That covers auditing what personal data you hold, drafting privacy notices, cookie policies and data processing agreements, advising on lawful bases and international transfers, handling subject access requests and complaints, and managing your response if a breach occurs. Subscribers also get ongoing advice as new tools, suppliers and marketing campaigns come along, which is where most compliance gaps open up.

Data protection support is included in our subscription plans, or you can instruct us on a fixed fee for a one-off piece of work, such as a privacy notice, a DPA review or a full data protection audit. The fee is always agreed before we start, so there is no hourly-rate surprise from us.

Yes. UK GDPR applies to any organisation that processes personal data, whatever its size, and most businesses also have to pay the ICO's data protection fee. Some record-keeping duties are lighter for businesses with fewer than 250 staff, but the core obligations, including a lawful basis for processing, transparency, security and responding to individuals' rights, apply to everyone. For most SMEs, compliance comes down to a handful of well-drafted documents and sensible habits, not a full-time department.

Only in specific cases: public authorities, organisations whose core activities involve large-scale, regular and systematic monitoring of individuals, or large-scale processing of special category or criminal offence data. Most SMEs fall outside those categories, but every business still needs someone accountable for data protection. Many of our clients use us as that point of contact, so they have a solicitor on hand when a question or a request comes in, without paying for a full-time hire.

Within one month of receiving it, which can be extended by up to two further months where requests are complex or numerous. Under the Data (Use and Access) Act 2025 you only need to carry out reasonable and proportionate searches, and the clock pauses while you verify the requester's identity or wait for clarification. We help you scope the search, apply the exemptions properly and get the response out on time, so a routine request does not turn into a complaint to the ICO.

Contain it first, then call us. Not every breach has to be reported, but where there is a risk to individuals the ICO must be notified within 72 hours of you becoming aware, and the people affected must be told without undue delay if that risk is high. We help you assess the risk, decide whether to notify, draft the notification and manage communications with customers and staff, so a bad day does not become a regulatory problem.

Talk to us about your business legal needs

Learn how our services can benefit you by scheduling a call with one of our team members.

Willem van der Merwe

Co-Founder