IMPORTANT NOTICE: LEX NEGATA LTD is an independent consultancy. We do not provide regulated legal advice or operate as a law firm.
Home / GDPR Statement
Governance & Trust

GDPR Compliance Statement

LEX NEGATA LTD is committed to maintaining the highest standards of data security and confidentiality in accordance with the UK General Data Protection Regulation (UK GDPR).

Effective Date: June 30, 2026

As an independent social care compliance consultancy, we frequently advise local authorities and NHS partners on complex statutory decisions. We recognize the importance of data protection, especially regarding vulnerable adults. This statement outlines our GDPR protocols.

1. Data Controller and Data Processor Roles

For website enquiries and newsletter subscriptions, LEX NEGATA LTD acts as the Data Controller. We do not sell or share your contact information.

For our audit and casework review services, we act as a B2B advisor. We do not act as a direct data processor for service user personal data because we enforce a strict anonymisation mandate.

2. Anonymisation Mandate for Audits

To protect individual privacy and maintain compliance with data protection laws, we enforce the following rules:

  • PII Redaction: Before submitting any case files, panel logs, assessments, or letters of claim for our review, client organisations must redact all Personally Identifiable Information (PII).
  • Redacted Fields: This includes names, addresses, NHS numbers, dates of birth, family names, phone numbers, and identifying school or workplace details.
  • Compliance Check: Upon receiving audit materials, our consultants inspect files for PII. If personal details are discovered, we immediately delete the files and request a redacted version.

3. Data Security Measures

We employ robust security measures to protect the information transmitted to us:

  • Secure File Transmission: All data is uploaded via secure, encrypted channels.
  • Access Control: Access to audit files is restricted solely to the consultants assigned to the project.
  • Secure Storage: Files are stored on encrypted servers with multi-factor authentication (MFA).
  • Secure Destruction: Anonymised files are permanently deleted from our servers within 30 days of project delivery.

4. Staff Training & Confidentiality

All Lex Negata consultants sign formal Non-Disclosure Agreements (NDAs) and receive regular training on data protection, information security, and GDPR compliance.