Decision guides

Who should carry out privacy improvements?

Break the work into decisions, documents, process changes and technical tasks.

Reviewed 18 September 2026 · Prahari DPO

Assign work to the right owner

Business leaders approve purposes and priorities. Process owners change routines. Technical teams change systems. Advisers explain issues and review proposed approaches within their mandate.

Choose a delivery arrangement

Internal delivery suits work the team understands and can resource. External help can address a defined backlog or skill gap. A combined project needs one action register and clear acceptance decisions.

Test before calling work complete

A revised policy needs an operating handover. Test a fictional request, withdrawal or supplier exit; record what happened, what failed and who owns the remaining action.

Common questions

Can an adviser implement every change?

Only work explicitly included and supported by the necessary access and expertise. Legal, technical and business approvals remain distinct.

How do we prevent a document-only project?

Define an operational output and completion check for each priority before work starts.

Discuss the work you need

Agree the service, deliverables, responsibilities and fees before committing to an engagement.

Related reading

This page explains topics to scope and discuss. It does not establish applicability, certify compliance or confirm a paid engagement.

← Decision guides