Core Services

Data Protection Remediation & Implementation Roadmap

We guide your organisation through the full journey of privacy compliance: 

• Gap Analysis:Initial assessment of compliance with the Mauritius DPA, GDPR, and relevant privacy standards.
• Policies & Procedures:Drafting orupdating ofkey documents, including data privacy policy,privacy notices, data subject rights request procedure, and data breach response plan, among others.
• Implementation:Ongoing support with our Implementation Tracker Tool and stakeholder follow-ups.

02. Outsourced DPO / DPO Support

We provide flexible DPO services for full outsourcing or support to your designated officer: 

• Monitoring compliance and advising on the relevant data protection law
• Drafting and reviewing privacy policies, procedures, and contracts
• Managedata subject rights requests and data breach notifications
• Consent managementassistance
• Processor selectionassistance
• Review and update of the Record of Processing Operations (RPO)
• DPIA support for high-risk processing activities
• Training and awareness
• Conducting internal privacy audits

03. Data Protection Audits

We conduct a comprehensive review to test the design and operational effectiveness of your data protection framework: 

• Evaluation of existing policies, practices, and systems
• Testing of privacy controls in practice
• Detailed audit reports with practical recommendations

04. Data Breach Preparedness

Prepare for the unexpected – we simulate data breach scenarios to prepare your team for real-world events through: 

• Tabletop breach simulations
• Incident response evaluation
• Post-exercise reporting and training

05. Data Protection by Design and by Default

We help you embed privacy controls at every stage of a system’s lifecycle: 

• Systematic incorporation of privacy principles into systems and processes
• Collaboration with development teams from design to deployment
• Ensures compliance with the applicable data protection law

06. ISO 27701 Implementation

We assist you in designing and implementing a customised ISO 27701-compliant framework. Our support includes: 

• Gap assessment against ISO 27701 requirements
• Development of privacy-specific policies and controls
• Preparation for certification audits
• Assistanceduring the certification process

07. Access Rights Review

We offer a tailored approach to meet the unique needs of organisations. We verify user access rights and provide a detailed report of our findings. Our team can also build a user access matrix to help your organisation manage and control user access, improving overall system security. 

08. Training & Workshops

We offer a range of practical and interactive training programs designed to build privacy awareness, strengthen compliance, and support role-specific responsibilities.

Our core training offerings include: 

• Data Protection Awareness (2hrs)
• Advanced / DPO Training (3.5hrs)

• Custom sessions for Boards, Auditors, and Staff
• Modules: Privacy Principles, Privacy Governance, DPIA, Audits, Cross-border Transfers, and Breach Management

Our Privacy Tools

We support our engagements with a suite of proprietary privacy tools: 

Why BDO IT Consulting?

• Extensive Regional Experience: Trusted by clients across Mauritius, Seychelles, Kenya, Uganda, Rwanda, Botswana, and Réunion Island, amongst others.
• Sector-Specific Expertise: Financial services, insurance, education, health, logistics, government, and more.
• Certified Professionals: CIPP/E, CIPM, CIPT, ISO 27701 Lead Implementer, PECB Certified DPOs, and PECB Certified Trainer.
• End-to-End Support: From gap assessments and documentation to audits, tools, and training.
• Practical & Risk-Based: Customised frameworks aligned to business needs and regulatory standards.
• Global Network, Local Delivery: Benefit from the global BDO brand with on-the-ground understanding.

Trusted Across Sectors

Our data protection services have supported organisations across a diverse range of industries. From financial institutions to educational establishments and manufacturing giants, we have helped clients embed privacy into their operations and meet regulatory obligations. A snapshot of the industries we serve:

Our Certifications

Our team includes legal experts, cybersecurity specialists, risk professionals, and project management consultants. Our privacy experts hold the following certifications:

Insights