The truth about how your data is handled.
Not paperwork - an honest, transparent account of what happens to your information, and I stand behind it. Practical GDPR and UK GDPR compliance for organizations across the UK and EU.
Hi, I'm Jana. I make data protection practical.
Verity Privacy is a boutique GDPR consultancy specializing in EU and UK data protection law, run by Jana Beguna - an EU data protection consultant. When you work with Verity, you work directly with Jana.
I help businesses handle personal data properly - from reviewing websites and software for GDPR and UK GDPR compliance, to drafting privacy documentation, acting as an outsourced Data Protection Officer (DPO), and advising on day-to-day privacy questions and staff training. From website privacy policies to data protection compliance in the UK and EU, the goal is always the same: make compliance practical, not overwhelming.
[1] Verity - from the Latin veritas, "truth"; conformity to fact, free from distortion.
Privacy - from the Latin privatus, "set apart, belonging to oneself"; freedom from unwanted intrusion.
I'm a CIPP/E certified privacy professional, a graduate of Riga Graduate School of Law, and hold an LLM from Stockholm University.
I've worked as a lawyer since 2018, with data protection as my core focus. In 2026, I launched Verity Privacy to work with clients directly.
I see privacy not just as a legal obligation, but as an asset worth protecting carefully - which is why I treat every client's situation as its own case, not a variation on a template.
Connect on LinkedInPrivacy compliance is easy.
At Verity Privacy, every engagement starts with how your business actually handles data. What you get back is a remediation plan - legally sound, specific to your risk, ready to act on immediately.
Tell me what your needs are
Get in touch and explain the situation.
I step in on the project
DPO services, policy drafting, audits, gap assessments - matched to what you specifically need.
You get something you can actually use
Documentation, a role filled, a policy in place - whatever "done" means for your need.
How I can help
Three ways I help with data protection compliance
Privacy & Data Protection
- Privacy governance from the start: practical internal processes for managing personal data.
- Privacy gap audits - websites, mobile apps, HR, KYC, customer onboarding, and more.
- Outsourced Data Protection Officer (DPO) services.
- Data Protection Impact Assessments (DPIA drafting).
- Legitimate Interest Assessments.
- Data breach response support.
- Data subject requests handling - access, information, erasure, and more.
- Regulatory advisory.
Policies & Documentation
- Website privacy policy service, cookie policy and cookie banner compliance.
- Internal privacy policies - Data Retention, Incident Response, Access Request procedures, and more.
- Website Terms & Conditions.
- Employee privacy policies.
- Data Processing Agreements.
Training & Awareness
- GDPR training for employees - UK GDPR and EU GDPR awareness sessions.
- Employee workshops.
- Security awareness, including ISO and SOC awareness sessions.
- Practical privacy exercises.
- Regulatory updates.
Business cases
DPO services
External DPO for a software provider serving assessment organizations in the education sector, handling sensitive data including data of minors, with EU–Canada data transfers.
Training
Delivered GDPR and Information Security training to 100+ participants.
Documentation
Drafted 10+ business-specific privacy policies, including cookie policies and cookie banners.
Audits
Conducted a full gap audit of internal privacy procedures, identifying compliance gaps across data retention, consent, and vendor management for 5+ companies.
News & insights
GDPR Omnibus: What the Proposed Changes Mean for Organizations
The EU's November 2025 Digital Omnibus proposal would reshape what counts as personal data, limit certain acce...
Using AI Responsibly with Personal Data
When AI processes personal data, the duties of fairness, accuracy and accountability don't disappear. A practi...
Privacy by Design: Building Data Protection in from the Start
Data protection works best when it's built into systems from the start, not bolted on later. What Article 25 G...
Data Minimization in Practice
You don't get to collect personal data "just in case". How to decide what you actually need, why over-collecti...
Tell me what you're handling.
Whether you're starting from scratch or cleaning up years of it, I'll give you an honest read on where you stand.