About

Trilateral

Research

Trilateral Research, founded in 2004, is a leading multidisciplinary consulting and technology development company. Our team collaborates across social science and technology, to bring insights from each to capture the benefits of data-driven innovation. We create knowledge and tools that empower our clients to transform research into innovation and innovation into impact.

Our foundation is in social science research, with a special focus on the ways in which new technologies may have privacy, social, ethical or data protection impacts. We have built upon this foundation to add cutting edge competencies leading to a rich, diverse set of consulting services within innovation management and technology development. All Trilateral’s services sit within four industry sectors in which we have expertise: ICT, Smart Cities, Crisis & Security and Environmental Sustainability.

Our team collaborates across sociology, criminology, computer science, engineering, economics, technology studies and law and human rights to deliver bespoke, multi-disciplinary services to clients in the public and private sector. This blend of expertise, along with our experience working at different levels in the government sector and across different industrial verticals provides a unique value proposition to our clients.

Management

Director
Read Bio
Kush Wadhwa
Director
Read Bio
Rachel Finn
Practice Manager - Data Science
Read Bio
Hayley Watson
Practice Manager - Crisis & Security
Read Bio
Finance Operations Manager
Read Bio
Practice Manager - Public Sector
Read Bio

Our Team

trilateral project
Data Protection Advisor
Read Bio
Data Protection Advisor/Research Analyst
Read Bio
Research Analyst
Read Bio
Angelo Napolano
Communications and Marketing Manager
Read Bio
Senior Technology Architect
Read Bio
Data Protection Adviser
Read Bio
Corinna Pannofino
Research Communications Officer
Read Bio
Research Manager
Read Bio
Graphic Designer
Read Bio
Fanou Rasmouki
Senior Research Analyst
Read Bio
Research Analyst
Read Bio
Marketing and Communications Officer
Read Bio
Data Analyst
Read Bio
Graham Hesketh
Senior Data Scientist
Read Bio
Muraszkiewicz
Research Manager
Read Bio
Kai Matturi
Data Protection Advisor
Read Bio
Katrina Petersen TRI
Senior Research Analyst
Read Bio
Research Analyst
Read Bio
Project manager
Read Bio
Research Analyst
Read Bio
Research Accountant
Read Bio
Data Protection Advisor
Read Bio
Research Manager
Read Bio
Research Analyst
Read Bio
Senior Research Analyst
Read Bio
Senior Research Analyst
Read Bio
Research Analyst
Read Bio
Software Engineer
Read Bio
Data Scientist
Read Bio
UI/UX Designer
Read Bio

Careers

We’re always on the lookout for exceptional talent. If you think we should hire you, please send us your CV: info@trilateralresearch.com

Data Protection Advisor

Senior Research Analyst / Research Analyst – Privacy, Ethics & Data Protection

Senior Research Analyst/Research Analyst – Privacy, Ethics & Social Impact Assessment

Research accountant

Communications and Marketing Internship

Testimonials

  • The work of WP 4 on legal and ethical implications and its integration at a stage whereby it can inform the planning of the R&D approach is worthy of note for the potential impact it could have on work plans for future EU funded projects. It offers an exemplar and should be shared across other projects in the Work Programme and beyond. It is suggested that more dissemination through both scientific and non-scientific channels is targeted during the project lifetime.

    Project Reviewer, DEVELOP project, October 2017 - http://www.develop-project.eu

  • Trilateral completed both projects to our full satisfactory and delivered high quality products that advanced our understanding on the opportunities of deploying technology based approaches for humanitarian work.

    Karin Metz, Global Disaster Preparedness Center, May 2016 - http://preparecenter.org/

  • The tasks of Trilateral Research included the management of the Stakeholder Communities, the creation of the Dissemination and Communication Plan and the Data Management Plan, a large set of promotional materials and numerous promotional activities of the project. They also designed and edited the Conference Brief for the project’s final conference. Trilateral Research also participated in ethics monitoring throughout the project. As the coordinator of the project, I am happy to recommend Trilateral Research to similar tasks in research projects. All tasks allocated to them were managed with skill, prudency and high quality.

    Pertti Woitsch, ResiStand Coordinator, Geowise

  • The company was responsive to the ICRC’s needs and always wished to ensure client expectations were met. I am pleased to commend Trilateral to any organisation wishing to have high quality research services, insightful analysis, and well-written reports.

    Massimo Marelli, International Committee of the Red Cross (ICRC), June 2016 - https://www.icrc.org

  • In 2013 Trilateral Research prepared a report on privacy impact assessment and risk management for the Information Commissioner’s Office…The report was detailed and provided authoritative research input for the ICO’s revised PIA Code of Practice…We were pleased with the quality and value for money the report provided.

    Steve Wood, Information Commissioner’s Office, June 2016 - https://ico.org.uk/

Clients & Partners

  • carousel image
  • carousel image
  • carousel image
  • carousel image
  • carousel image
  • carousel image
  • carousel image
  • carousel image
  • carousel image

Outsourced DPO

See below a list of standard requirements for this service, however we are always available to tailor our services in relation to our clients' needs.

Contact us to discuss further.

Serve as your DPO

Company name and contact details transmitted to the ICO Company name and contact details available to:
  • Management
  • Employees
  • Data subjects
Article reference: 37

Contact point for data subjects

  • Contact data accessible on the websites and privacy notices
  • Function as the main public contact point (email & post)
  • Guide your organisation on the possible sources of data access requests.
Article reference: 38(4)

Contact point for Data Protection Authorities
(e.g. ICO)

Liaise with the ICO in case of issues with data subjects and data breaches.
Article reference: 39(1)(d), 39(1)(e), 36

Ad hoc advice on difficult data protection issues

Written opinions on data protection queries, with an analysis of relevant issues or other relevant legislative elements
Article reference: 39(1)(a)

Regular newsletter to inform and advise on relevant developments and possible challenges in data protection

Newsletter containing the latest regulatory news and compliance guidance, and news concerning conferences and training opportunities
Monthly
Article reference: 39(1)(a)

Annual gap analysis

Audit and gap analysis to map new activities and data-processing practices
Virtual
Article reference: 39(1)(b)

Status discussion (via phone/skype) and report

Discussion and report
Every 6 months
Article reference: 39(1)(b)

Review of the privacy notices

Review of the privacy notices to ensure accuracy and advice on how to improve
Article reference: 39(1)(b)

Provide advice to the client organisation on how to carry on data protection impact assessments (DPIA) and to monitor their performance

We provide advice on:
  • Whether to carry out a DPIA
  • The best methodology to follow
  • Whether to carry out the DPIA in-house or to outsource it depending on the complexity
  • What safeguards (including technical and organisational measures) to apply to mitigate any risks to the rights and interests of the data subjects
  • Whether the DPIA has been correctly carried out and whether its conclusions are in compliance with the GDPR
Article reference: 39(1)(c)

Oversee the establishment and maintenance of the Record of Processing Activities

  • Contact point for the designated employee
  • Guidance on the Record, including provision of check-lists, best practices, and methodological advice
Article reference: 39

Provide guidance on data breach handling and reporting

  • Contact point for the responsible person
  • Contact point for the ICO
  • Advice on best practices for handling data breaches, including notification requirements, reporting and identification of measures to limit damage
Article reference: 33(3)(b)

Monitor the data-protection-training activities and advise on their necessity

  • Inclusion of a chapter on training in the status reports
  • Provision of news and updates on relevant conferences and training courses (newsletter)
  • Provision of training materials, where appropriate
Article reference: 39(1)(b)

Email and telephone assistance

-
Article reference: -

Bespoke notifications to management on critical legislative, judicial, or policy developments that may impact your business

Email notification with explanation of the development and a preliminary overview of the impact on the organisation
Article reference: 39(1)(a)

Training seminar on the developments of data protection law and policy

-
Article reference: -

Review of the consistency of the internal documents concerning data processing practices

Cross-check of the consistency of the internal documents
Article reference: 39(1)(b)

Weekend and holidays data breach guidance

Data breach guidance during the weekends and holidays
Article reference: -

DPO Assist

See below a list of standard requirements for this service, however we are always available to tailor our services in relation to our clients' needs.

Contact us to discuss further.

Ad hoc advice on difficult data protection issues

Written opinions on data protection queries, with an analysis of relevant issues or other relevant legislative elements
Article reference: 39(1)(a)

Regular newsletter to inform and advise on relevant developments and possible challenges in data protection

Newsletter containing the latest regulatory news and compliance guidance, and news concerning conferences and training opportunities.
Monthly
Article reference: 39(1)(a)

Annual gap analysis

Audit and gap analysis to map new activities and data-processing practices
Virtual
Article reference: 39(1)(b)

Status discussion (via phone/skype) and report

Discussion and report
Annually
Article reference: 39(1)(b)

Review of the privacy notices

Review of the privacy notices to ensure accuracy and advice on how to improve.
Article reference: 39(1)(b)

Provide advice to the client organisation on how to carry on data protection impact assessments (DPIA) and to monitor their performance

We provide advice on:
  • Whether to carry out a DPIA
  • The best methodology to follow
  • Whether to carry out the DPIA in-house or to outsource it depending on the complexity
  • What safeguards (including technical and organisational measures) to apply to mitigate any risks to the rights and interests of the data subjects
  • Whether the DPIA has been correctly carried out and whether its conclusions are in compliance with the GDPR
Article reference: 39(1)(c)

Provide guidance on data breach handling and reporting

  • Contact point for the responsible person
  • Advice on best practices for handling data breaches, including notification requirements, reporting and identification of measures to limit damage
Article reference: 33(3)(b)

Monitor the data-protection-training activities and advise on their necessity

  • Inclusion of a chapter on training in the status reports
  • Provision of news and updates on relevant conferences and training courses (newsletter)
  • Provision of training materials, where appropriate
Article reference: 39(1)(b)

Email abd telephone assistance

-
Article reference: -

Bespoke notifications to the top management on critical legislative, judicial, or policy developments that may impact your business

Email notification with explanation of the development and a preliminary overview of the impact on the organisation
Article reference: 39(1)(a)

Compliance Support

See below a list of standard requirements for this service, however we are always available to tailor our services in relation to our clients' needs.

Contact us to discuss further.

Data Mapping

Map the data flows within your organisation to better understand how personal information flows between departments

Data Protection Impact Assessments

Where required by the GDPR or national law, conduct or review DPIAs using our library of good practices
Article reference: 35

Consent and Privacy Notice Requirements

Revise and improve consent and privacy notices to meet transparency and accoutnability requirements

Gap Analysis

Identify gaps in your organisation's compliance with the GDPR, national data protection legislation or sectoral legislation

Data Protection Audit

Audit your organisation's activities to assess your compliance with applicable data protection law

Data Protection-by-design and -default

Work with your technical and admin teams to operationalise Data Protection-by-design and -default, using established good practice
Article reference: 25

Training

We offer general, role-based (e.g., HR) and activity based (e.g., DPIA) training. All our training materials are designed to be accessible to non-experts and easy to use

General compliance support

Support for creating required documentation, including, but not limited to Records of Processing activities, Data retention (and deletion) schedules, Personal Data Breach procedures, Subject Access Request procedures, Training materials, Legitimate Interest Assessments, etc.)