Managing personal information is no longer simply a compliance exercise. Organisations face increasing regulatory scrutiny, growing public expectations around transparency, and a constantly evolving threat landscape. Effective data protection and information governance are now essential components of good governance, organisational resilience and stakeholder trust.

At Tiaa, our Data Protection Advisory Service provides practical, independent support to help organisations meet their legal obligations, strengthen governance arrangements and manage information confidently and responsibly.

Supporting Compliance Across the Information Governance Framework

Our advisors provide support across the full information governance landscape, including:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018 (DPA 2018)
  • Data (Use and Access) Act 2025 (DUAA)
  • Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), as amended
  • Freedom of Information Act 2000 (FOIA)
  • Environmental Information Regulations 2004 (EIR)
  • Common Law Duty of Confidentiality
  • Records Management obligations
  • NHS Information Governance and DSPT requirements
  • Social Housing transparency requirements, including STAIRS

Whether you require a fully outsourced Data Protection Officer, support for an existing DPO, or independent assurance of your current arrangements, our specialists provide pragmatic, risk-based advice tailored to your organisation.

Our Services

Data Protection Officer Services

We can provide a fully outsourced DPO function or additional support to internal teams, delivering independent advice, oversight and assurance to Boards and senior management.

Data Protection Audits and Compliance Reviews

Our independent reviews assess governance arrangements, policies, procedures, data handling practices, retention schedules, privacy notices and organisational compliance, providing practical recommendations for improvement.

Information Rights Management

We support organisations in managing:

  • Subject Access Requests (SARs)
  • Freedom of Information requests
  • Environmental Information Regulation requests
  • Requests relating to data subject rights under UK GDPR

Helping ensure compliance with statutory timescales and regulatory expectations.

Data Breach and Incident Management

Our advisors provide expert support in assessing, investigating and responding to personal data breaches, including ICO reporting requirements, mitigation measures and lessons learned reviews.

Data Protection Impact Assessments (DPIAs)

We assist organisations in identifying and managing privacy risks associated with new projects, systems, technologies and information-sharing initiatives.

Policies, Procedures and Governance Documentation

We review and develop:

  • Data Protection Policies
  • Privacy Notices
  • Data Sharing Agreements
  • Information Governance Frameworks
  • Records Retention Schedules
  • Information Sharing Protocols
  • Breach Management Procedures
  • FOI Procedures
Training and Awareness

We deliver tailored training for Boards, Trustees, senior leaders and staff to help embed a positive information governance culture and improve compliance across the organisation.

Freedom of Information and Transparency Services

Openness and transparency are increasingly important for public, charitable and regulated organisations.

Our services include:

  • FOIA compliance audits
  • Publication scheme reviews
  • Information request handling assessments
  • Transparency and governance reviews
  • Records management reviews
  • Regulatory readiness assessments

These services help ensure organisations meet their obligations while demonstrating accountability to regulators, stakeholders and service users.

Specialist Support for the Social Housing Sector

Tiaa provides specialist support to housing associations and registered providers in relation to information governance and transparency obligations.

Our services include:

  • STAIRS compliance reviews
  • Publication and website content assessments
  • Governance and transparency reviews
  • Tenant information management reviews
  • Data protection compliance assessments
  • Record retention and information management reviews

We help providers demonstrate compliance with regulatory expectations while strengthening trust and engagement with tenants.

Why Choose Tiaa?

Our consultants combine extensive experience in governance, audit, risk management, information governance and regulatory compliance. We provide practical, proportionate advice that helps organisations manage risk, improve compliance and demonstrate accountability.

Whether you require an outsourced DPO, a compliance audit, FOIA support, a data protection review, STAIRS assessment or assistance responding to a data breach, Tiaa can provide the independent expertise and assurance needed to support your organisation.

Contact Us

To find out more about Tiaa’s Data Protection Advisory Service and how we can support your organisation, please contact our team. We will be happy to discuss your requirements and develop a solution tailored to your needs.