GDPR Audit & Breach Action Plan

I run a small recruitment agency and need a fresh, expert set of eyes on our GDPR policy and ensure its aligned to our process. You will have some material to start with: our existing policy and limited documentation on how we collect data. Please review, identify the gaps, and rewrite or expand wherever needed so that the finished documents are ready to share with staff, candidates, and clients. Separately, we recently experienced a data breach. We know the cause, we contained it, made the client aware and carried out an incident review. We need support with the corrective actions. Deliverables 1. Written audit report highlighting non-compliant areas. 2. Updated GDPR policy and any supporting procedures/templates. 3. Breach incident review with root-cause summary and recommended corrective actions. Acceptance criteria: each recommendation must cite the relevant GDPR article, be proportionate for a small recruitment firm, and include a brief cost/effort estimate so I can plan resources. I’m happy to provide access to our current documents, systems outline, and breach logs as soon as we start.