Data Protection Packages

We offer fixed-fee packages designed around different complexity and scale of data processing.

These packages range from a public-facing compliance framework, to a more comprehensive internal framework.

Data Protection Compliance Packages — Lay Law
Package A - Public-Facing
POPIA / PAIA Compliance Package (A)
Get the essential, external-facing compliance elements in place.

This package focuses on the public-facing aspects of data protection compliance - ensuring your business meets its core obligations when collecting and using personal information.

What's included

A tailored, external-facing compliance framework, including:

  • Privacy Policy (including Cookie Policy)
  • Cookie consent pop-up guidance
  • Email disclaimer
  • Unsubscribe / opt-out wording
  • PAIA Manual
  • Registration of Information Officer
  • High-level advisory note outlining key compliance considerations and how the documentation should be used in practice

All documentation is tailored to your business and how you process personal information.

R14,000
Fixed fee
Package A
Optional add-ons
  • Training webinar (may be used by the business indefinitely) R3,000
  • Additional cross-border compliance guidance R5,000 For businesses requiring guidance on international or cross-border data protection considerations.
  • Businesses with limited and low-risk data processing
  • Businesses collecting basic customer or user information
  • Businesses needing to meet core POPIA and PAIA requirements

You walk away with:

  • Compliant, customer-facing data protection documentation
  • Alignment with core POPIA and PAIA requirements
  • Reduced regulatory and reputational risk
  • A clear starting point for broader compliance
Package B - Operational & Internal
POPIA / PAIA Compliance Package (B)
Build a more complete, internal data protection framework.

This package goes beyond public-facing compliance and introduces the internal structures, policies and processes required for more mature or data-driven businesses.

What's included
Includes everything in Package A, together with:
Privacy Policy - Cookie consent guidance - Email disclaimer - Unsubscribe wording - PAIA Manual - Information Officer registration - Advisory note
  • POPIA clause for employment agreements
  • POPIA clause for other agreements
  • POPIA addendum / privacy notice for agreements
  • Data Subject Request Procedure
  • Record of Processing Activities (ROPA) template
  • Security Incident and Personal Data Breach Policy
  • Personal Information Impact Assessment (PIIA) guideline and template
  • Data Retention Policy
  • Data Processing Agreement template
  • Information Officer “Cheat Sheet”

All documentation is tailored to your operations, systems and data flows.

R36,500
Fixed fee
Package B
Optional add-ons
  • Training webinar (may be used by the business indefinitely) R5,000
  • Additional cross-border compliance guidance and documentation R10,000 For businesses with international data flows or broader cross-border compliance requirements.
  • Businesses with growing teams and more complex operations
  • Businesses processing personal information at scale
  • Businesses using multiple systems, platforms or integrations
  • Businesses requiring a more structured compliance approach

You walk away with:

  • A structured internal and external data protection framework
  • Clear policies and procedures for managing personal information
  • Improved compliance with POPIA and PAIA
  • Reduced regulatory, operational and liability risk
  • A business better prepared for audits or regulatory engagement