GDPR StepWise™ · a programme by Structured PM
Ten steps. Prices published.
You finish with documented processes your team owns, and the evidence pack a client or a regulator asks to see.
Step zero is free. After that there are two routes through the same ten steps, and the only difference is whether you run them yourself or have someone check your work as you go.
Four things, every time
Documented processes
Written down, owned by a named person, and matching how the work is really done.
A trained team
The people who run the process know what it says and why it says it.
An evidence pack
One place to answer a security questionnaire from, instead of six email threads.
Governance that runs on
A review calendar with real dates, so the work stays current after we finish.
The ten steps
Fixed order, because each step uses what the one before it produced. The price shown is the Guided price for that step. On Self-Serve every step is included in the subscription.
00 Discovery Free
A short written picture of where your business stands, what a client or a regulator would ask for first, and which route suits you. You keep the findings whichever route you pick, or if you pick neither.
01 Data mapping £950
A record of processing activities and a map of where personal data enters, sits and leaves the business. Everything after this step reads from it.
02 Privacy notices £650
An external privacy notice and a staff privacy notice that describe what the business actually does, rather than what a template assumed.
03 Lawful basis and consent £750
A register recording why you are allowed to hold each set of data, and working consent records where consent is the reason.
04 Processors and transfers £850
A register of every supplier that touches your data, the contract terms that need to be in place, and a transfer risk assessment where data leaves the UK.
05 Individual rights £850
A written procedure for handling access, deletion and correction requests, with the workflow and the response templates your team will actually use.
06 Retention and acceptable use £750
A retention schedule saying how long each type of record is kept and who deletes it, plus an acceptable use policy for the systems your team works in.
07 Breach response £550
A written plan for the worst day: who decides, who is told, in what order, and inside what deadline. Plus the log you keep as it happens.
08 Security and staff awareness £850
The security policies a buyer asks about, and a training record showing your people have read and understood them.
09 DPIA and high risk processing £650
A method for spotting work that needs a data protection impact assessment before it starts, and completed assessments for the ones you are doing now.
10 The StepWise Seal £750
The full evidence pack, a review calendar with named owners and dates, and a dated record of completion with the evidence behind it.
Nothing on the Guided route costs more than £950, and you buy one step at a time.
Two ways to get it done
Same ten steps, same documents, same finish. The only question is whether you run it yourself or have someone check your work as you go.
You run it, the platform does the paperwork
£99a month, or £990 a year. No minimum term on the monthly plan.
You answer plain questions about how your business works. The platform turns the answers into the registers, notices and procedures, and keeps them in one place.
- All eleven steps included, step 0 to step 10. Nothing locked behind a bigger plan.
- Your whole team in the account. No charge per person.
- Documents generated as you go, not blank templates to fill in.
- Stop for a month and pick up where you left off. Your work stays.
- Add a human check on any single step for £295. Ask from inside your account and we invoice it.
Step zero is free and stays free. No card needed. Monthly billing is not open yet, so the year is the only plan you can pay for online today.
You run it, I check every step
£950the largest single step. £7,600 for all ten, paid one step at a time.
Buy the next step when you are ready for it. Each one is reviewed and signed off before you move on, so nothing gets built on a wrong answer.
- One step at a time. Nothing costs more than £950.
- Review and sign-off included in every step price.
- No subscription and no minimum term.
- Move as fast or as slowly as your cash flow allows.
- Switch to Self-Serve later without losing completed steps.
Step zero is free. Start there.
Some businesses have a deadline and nobody to hand it to. In that case I run the ten steps and you approve the output. Scoped and quoted on the call, because the work depends on how much of it there is.
Prices exclude VAT where applicable.
What is in, what is not
Both routes unlock every step, so this is about how much help you get, not how much of the programme you get.
- All eleven steps, step 0 to step 10, in order
- Every document named against each step
- Your whole team, at no charge per person
- Everything you have finished stays yours if you stop
- Prices agreed before anything starts
- Legal advice or representation
- Acting as your data protection officer
- Formal certification, which is explained below
- Monitoring your systems day to day
The StepWise Seal is a dated record of completion and the evidence behind it. That is the whole of what it is, and we do not describe it as anything more. Under Articles 42 and 43 of the UK GDPR, formal certification comes from UKAS-accredited bodies working to ICO-approved criteria. We are not one, and the Seal is not that.
The honest answers
We already did GDPR in 2018
Then you have a starting point. What has changed since is your headcount, your suppliers and your systems. The question is whether the record matches how the business works today, and it usually does not.
How long does this take?
About six months from step 1 to step 10 at a steady pace. Each step stands on its own and you decide when the next one starts, so the pace is yours to set. You are not waiting until the end for a result, you get one at every step. If a client deadline means you need the first three quickly, we sequence it that way.
Our solicitor handles this
Keep them. They tell you what the law requires. We build the process that does it, and train the people who run it. Different job, and we work alongside their advice rather than repeat it.
Can we just buy the software?
You can, and it will track work you have not defined yet. Tools are good at maintaining a process and poor at creating one. Build it first, then buy a tool to keep it current if you want one.
Nobody has ever asked us for this
Not yet. It gets asked by the first enterprise client, the first funder, or the first person who wants their data deleted. Answering from a standing start is the reason to do it now rather than then.
What does it cost?
Every number is on this page. Self-Serve is £99 a month or £990 a year. Guided is £7,600 for steps 1 to 10, paid one step at a time, with no step above £950. Step zero is free, a verification on a single step is £295, and done for you is quoted on the call. Prices exclude VAT.
Not sure which route fits?
Thirty minutes. We will tell you which of the ten steps you already have, which route makes sense, and whether you need the full programme at all.
Book a 30 minute call