An illustrative scenario showing how a professional services firm might respond to a data-protection inquiry by building a proportionate privacy programme rather than a one-off fix.
A professional services firm handling sensitive client data had no formal privacy compliance programme and needed to respond to a data-protection inquiry regarding its personal data handling practices.