RCM
GDPR audit and roadmap
Measure the gaps between actual practices, applicable requirements and available evidence.
Variance ReportRisk matrix90 day plan
See Mission →
GDPR EXPERTISE · LAW 09-08
Specific GDPR services.
Specific GDPR services.
Evidence your teams can use.
From initial diagnosis to DPO management, we transform each obligation into understandable deliverables, decisions, responsible parties and deadlines.
SHORT ANSWER
Which GDPR services does RCM offer, and at what price?
RGPD Conseil Maroc supports companies in Morocco and those working with Europe on five needs: audit and gap analysis, compliance implementation, outsourced DPO, vendors and transfers, incidents and rights. Key prices are published:
| Service | Price excl. VAT |
|---|---|
| GDPR audit and gap analysis | €1,200 |
| GDPR Compliance Pack Essential | from €3,200 |
| GDPR Compliance Pack Complete (3 months of DPO included) | from €4,500 |
| Outsourced DPO | from 4,900 MAD / month |
Prices updated October 2026. Scope and firm price are confirmed in writing after a free scoping call.
INTERVENTION CATALOG
Choose by problem.
Choose by problem.
Not by jargon.
Each page details the trigger, the progress, the deliverables, the limits and the elements necessary to get started.
Compliance and documentation
Create or update the register, policies, notices, procedures and management tools.
RegisterPoliciesProcedures
See Mission →
Privacy by design and DPIA
Qualify a project, reduce its risks from the design stage and document trade-offs.
Screening DPIARisk analysisMeasurement plan
See Mission →
Processors and contracts
Identify roles, review clauses, evaluate guarantees and organize supplier monitoring.
Review article 28QuizSupplier register
See Mission →
France–Morocco international transfers
Map access and transfers, qualify GDPR mechanisms and CNDP formalities.
SCCEvaluation of the transferF-118
See Mission →
Incidents and exercise of rights
Structure the qualification, deadlines, communications, decisions and retention of evidence.
ProcedureIncident registerAnswer templates
See Mission →
THREE METHODS OF COMMITMENT
Punctual, continuous
Punctual, continuous
or immediately useful.
The right format depends on your urgency, maturity, risk level and internal availability.
Targeted mission
A defined problem, a limited scope, deliverables and an end date: audit, DPIA, contract or procedure.
Describe the mission →External DPO
A long-term reference to advise, monitor, monitor projects and organize evidence of compliance.
Discover the external DPO →Consultation
An urgent question, 50 minutes with a DPO and a personalized action note delivered within 48 hours.
Book a consultation →
DIMENSION
What really influences the mission
Nature of dataHIGH
Number of systemsVARIABLE
Providers and countriesSTRUCTURAL
Project rhythmCONTINUING
A DEVIS THAT EXPLISHES ITS LIMITS
Size doesn't tell everything.
Size doesn't tell everything.
Risk makes the perimeter.
Two organizations with the same workforce can have radically different needs. We check sensitive processing, volumes, technologies, recipients, countries, past incidents and expected availability before confirming an offer.
Compare perimeters →
DELIVERY METHOD
From facts to evidence.
From facts to evidence.
Without losing the teams.
Each step must produce a shared understanding and a maintainable result after our intervention.
Targeted interviews
Understand who does what, with what data, what tools and what constraints.
Evidence and discrepancies
Compare declarations with real documents, configurations, contracts and flows.
Realistic priorities
Propose proportionate measures with responsibility, effort and deadline.
Internal autonomy
Deliver readable documents, explain decisions and organize maintenance.
A specific need deserves a specific perimeter.
Send the context, systems involved, timeline and countries involved. We will respond to you with the relevant assignment format.