Data protection, Information Management and Cyber Security

We offer an in-depth GDPR service for clients, with different flexible support options and training choices to help make data protection and compliance easy. We can provide:

• Outsourced Data Protection Officer service
• Fully-managed Data Protection Officer service
• Data Protection Officer Assist services
• Supplementary services

Our expert team can give regulatory support, dealing with regulators on your behalf, helping you put in place mechanisms to maintain compliance, including drafting policies, and providing toolkits and monitoring solutions tailored to your business. See our Data Protection and GDPR section for more information on GDPR compliance and how we can help.

Freedom of Information (FOI) is the right to obtain information held by a public authority. The list of which organisations are considered as ‘public authorities’ is extensive, but includes: Police Scotland, universities, colleges, BBC, Scottish Enterprise, NHS Scotland and any company that is wholly owned by a public authority.

Anyone can make a freedom of information request. It has to be in writing and there should be a name and address (postal or email) to which a response can be provided. The public authority has 20 working days to provide a response (with some exceptions).

Organisations need to be aware of their FOI obligations and related information issues. At Thorntons, we can provide one-off or regular support on FOI matters, information governance and records management, including training and assistance in drafting responses and ensuring compliance with legislative timescales.

We can also provide advice and guidance to people wishing to make FOI requests, the process involved and how to ensure you receive the information you are looking for.

Cyber security affects all types of business operations, whether you are outsourcing IT services, doing business online, holding customer information, handling databases or dealing with software rights and licensing on the Cloud [link to IT services and Cloud Computing page]. As an organisation, you will want robust systems and agreements in place to deal with potential cyber security threats to data, intellectual property and confidential information.

At Thorntons, we can provide legal support and advice on a range of cyber security issues, including contract management and support, data-sharing agreements, data protection and IP rights. We also provide advice and support on the legal aspects of gaining the ISO 27001 information security management accreditation.