Governance & Risk

Some of the most critically important issues facing any organisation relate to governance, managing risk and compliance. Increasingly, funders as well as regulators expect the organisations they engage with to be run professionally and to have sound policies and practices in place before they will commit their support. These will include in particular policies relating to Safeguarding, Data Protection, Receipt and Use of Funds, Equality & Diversity, Whistleblowing and Anti-Bullying.

Understanding the legal landscape and one's obligations can seem daunting, particularly for smaller organisations with fewer resources.  But with constantly changing rules and regulations, simply doing things the way they have been done before is not an option. For example; How well do your trustees understand their responsibilities? Do your governing documents properly reflect your charitable objects?  Do your activities pass the Public Benefit test?  How well are you assessing and managing risk? Does your organisation have the best legal structure to protect its assets, and the trustees from personal liability?

Assessing your organisation's fitness for purpose needn't involve excessive cost.  We can provide clear, accessible and sound advice to help your organisation meet its regulatory obligations and to avoid pitfalls that you may not even know are there.

Data Protection & GDPR

Every organisation processing private personal data must adhere to the regulations governing its use. These rules dictate when data processing is allowed, what data you can process and for how long you can retain it. They explain each individuals' rights and your responsibilities for those processing data on your behalf, whether it's your staff, volunteers or third-parties with whom you have shared data.

​

Whilst the same set of regulations apply to every organisation, our advice is tailored to your specific needs, taking into account what kinds of data you process and how and why you need to manage personal information in a particular way.

​

Whether you're starting from scratch, or already have a range of policies and practices that need to be audited and reviewed, we find practical solutions for your organisation, through clear and accessible guidance.

​

Our comprehensive data protection audit and review will ensure that you have:

​

• The right policies and procedures for your organisation, framed in clear language that your those processing data can understand and implement.

• Clear guidance for staff and volunteers explaining the principles of data protection and key elements such as privacy, security, retention periods, third-party agreements, data subject rights and what to do in cases of breaches or Subject Access Requests.

• Training for staff and volunteers to meet their needs and GDPR requirements.