Skip to main content

Case Studies & Evidence

Evidence for decisions that carry consequences

See how IG-Smart supports regulated and high-consequence organisations with senior-led governance, independent assurance and practical outputs designed to stand up to procurement, board and regulatory scrutiny.

National programmes · enterprise assurance · retained specialist capability

Featured evidence

National strategy

NHS England

National privacy-by-design framework · multiple national workstreams

National data-privacy and information-governance advisory for NHS England

National publications and programmes affect patient data at population scale; IG failures carry significant public-trust and regulatory consequences.

IG-Smart role: Strategic data-privacy and data-sharing advisory

Read Full Evidence: NHS England

Enterprise assurance

AIG

A nationwide data-governance audit of an insurer's offsite records-storage supplier

Nationwide supplier audit

AIG’s Head of Client Services EMEA: “the results exceeded our expectations… The audit not only identified areas of improvement…”
Read Full Evidence: AIG

Retained specialist capability

Glenmark Pharmaceuticals

Retained external DPO service for a global pharmaceutical company's EU and LATAM operations

Retained external DPO · EU & LATAM remit

The client's VP Legal & Compliance (EU and LATAM): “Knowledgeable and responsive… We are in safe hands.”
Read Full Evidence: Glenmark Pharmaceuticals

Evidence library

All case studies

4 of 15 case studies match

  • PAUL UK

    Retail / Consumer, Data Privacy & DPO, Retained / managed service

    A five-year retained DPO partnership for a bakery and restaurant chain

    Challenge:
    Continuing DPO support and actionable gap analyses that turn GDPR requirements into practical improvements.
    IG-Smart role:
    Retained DPO service and gap analyses

    ProofRetained 5+ years

    • Named client
    • Named executive testimonial
    • Engagement scope stated
    • Long-term relationship
    • Deliverables described
    Read Full Evidence: PAUL UK
  • The Co-operative Group

    Retail / Consumer, Cyber, Retained / managed service

    Routine penetration testing for a major national retailer and co-operative

    Challenge:
    Routine penetration testing that evolves with the Group's digital footprint and informs risk prioritisation.
    IG-Smart role:
    Routine penetration testing

    ProofPreferred supplier relationship · 2+ years

    • Named client
    • Engagement scope stated
    • Long-term relationship
    • Deliverables described
    Read Full Evidence: The Co-operative Group
  • AIMIA Loyalty Solutions

    Retail / Consumer, Data Privacy & DPO, Strategic & programme advisory

    Global GDPR implementation and privacy-by-design for a loyalty-solutions business

    Challenge:
    A cross-border GDPR compliance framework, practical remediation of privacy risks, and a privacy-by-design approach that could be operated across international markets.
    IG-Smart role:
    Global GDPR implementation programme

    ProofGlobal GDPR implementation programme

    • Named client
    • Named executive testimonial
    • Engagement scope stated
    • Deliverables described
    Read Full Evidence: AIMIA Loyalty Solutions
  • Nectar

    Retail / Consumer, Data Privacy & DPO, Strategic & programme advisory

    End-to-end GDPR implementation for a major UK consumer loyalty scheme

    Challenge:
    An end-to-end GDPR programme covering the organisation's data-processing activities, delivered in partnership with an internal implementation team.
    IG-Smart role:
    GDPR implementation programme

    ProofFull-cycle, multi-workstream GDPR programme

    • Named client
    • Engagement scope stated
    • Deliverables described
    Read Full Evidence: Nectar

What the evidence helps clients decide

Decision-ready outputs

The outlines show how IG-Smart structures typical outputs. They are not client documents.

Differentiation

Why organisations appoint IG-Smart

  1. Senior practitioner-led

    Engagements are led by experienced practitioners with direct involvement in substantive advisory and assurance work, supported proportionately where appropriate.

    Evidenced by:NHS EnglandCapgemini

  2. Independent challenge

    Advice and assurance driven by evidence, requirements and risk rather than incentives to sell a technology platform.

    Evidenced by:AIGA FTSE 100 organisation

  3. Practical, decision-ready outputs

    Work designed to support accountable owners, procurement teams, executives and boards.

    Evidenced by:AIGUCL

  4. Experience in regulated and high-consequence environments

    Evidence supported through the published portfolio.

    Evidenced by:NHS EnglandUCLGlenmark Pharmaceuticals

  5. Retained capability where continuity matters

    Evidence from managed and long-term client relationships.

    Evidenced by:Glenmark PharmaceuticalsPAUL UK

Confidentiality & controlled disclosure

Evidence without compromising client confidentiality

Some of IG-Smart's most sensitive engagements involve regulatory, operational, security, commercial or patient-safety information that cannot responsibly be published in full. Where necessary, examples are anonymised or withheld from public listing.

Additional evidence may sometimes be available, subject to:

  • Confidentiality
  • Client permissions
  • Appropriateness for the buyer
  • Procurement stage
  • IG-Smart approval

Need evidence relevant to your requirement?

Tell us the sector, service or procurement requirement you are assessing.