Bridewell have developed a framework which is used to evaluate and assess an organisation’s current standing with respect to data protection compliance. The framework is split across 10 domains to structure the consultant’s findings and recommendations in a final report format. The domains, with controls aligned to the requirements of applicable data protection legislation, NIST Privacy Risk Assessment Methodology and ISO27701:2019, are as follows: Organisational Context Governance, Risk and Compliance Data Flow Analysis Data Subject Rights Contracts & Due Diligence Privacy by Design & Default Breach Management Assurance Activity Information Security Awareness & Culture