Data Protection Impact Assessment (Long Form)
A long-form Data Protection Impact Assessment that documents the risk analysis a high-risk processing activity requires before it launches, built for a high-value or heavily negotiated transaction.
Covers termination, transfer, dispute resolution, and the other back-half provisions that short forms skip. The complete provision set for a business whose exposure justifies covering every case.
Frequently asked questions
The fee covers the finished document, filing-ready or send-ready as applicable, the supporting exhibits or attachments described in the scope, and a short cover memorandum explaining the choices made. It is fixed at this scope: one processing activity. 2 rounds of revisions are included. If your matter falls outside that scope we tell you before starting and quote the difference — we do not bill past a flat fee without agreeing it first.
2 to 3 weeks from a complete set of instructions, plus time for the 2 rounds of revisions included in the fee. If you are working to a court deadline or a closing date, tell us when you order and we will confirm in writing whether we can meet it before you commit.
$5,200 is $325/hour × 16 hours — the time this deliverable takes in an ordinary data protection matter, at the firm's standard rate. Because it is a flat fee, the risk of the work running long sits with the firm: you pay $5,200 whether it takes us the estimate or twice it.
Third-party costs are never inside a flat fee and are passed through at cost, never marked up: court and agency filing fees, court reporter and transcript charges, expert witness fees, search vendor and e-discovery hosting charges, process server fees, and travel.
What your business does, and who its users or customers are, the systems, vendors, and data flows the document has to describe accurately, any existing version, and what prompted this one, and any regulator, platform, or contract requirement you are working to. Send what you have — if something is missing we will tell you what else we need before the turnaround clock starts.
Clients also order
Other Data Protection work MC Law prepares on a flat fee.
Children's Privacy Compliance Package (Long Form)
A detailed Children's Privacy Compliance Package that handles verifiable parental consent, data minimization, and the disclosures a child-directed service needs, covering the edge cases short forms leave open.
Standard Contractual Clauses and Transfer Impact Assessment (Long Form)
A comprehensive Standard Contractual Clauses and Transfer Impact Assessment that legitimizes cross-border data transfers with the clauses and the assessment regulators expect to see, with the full set of protective provisions a significant deal deserves.
Children's Privacy Compliance Package — Template and Playbook
A template Children's Privacy Compliance Package and playbook your team can run without counsel on every deal, for the agreement that handles verifiable parental consent, data minimization, and the disclosures a child-directed service needs.
Data Processing Agreement — Negotiation and Closing (Customer Side)
Full customer-side negotiation of a Data Processing Agreement, the document that allocates controller and processor duties, security obligations, subprocessing, and breach notification, from first draft to closing.