Doing business in the EU

Newport Thompson + Optimity
Reduce Risk


Increase in App Installs


Increase in Policies Documented


Carrot Rewards is an app that tracks and rewards physical activity. With the stress on the healthcare systems initiatives like Carrot Rewards help all stakeholders, including government, encourage people to be proactive about their health by helping them "get off the couch". Carrot Rewards have developed a relationship with the UK government but in order for them to operate in the EU/UK they had to become compliant with the GDPR.


  • Privacy Consulting

Carrot Rewards engaged Newport Thomson to conduct a privacy review - a thorough audit of their current practices including Data Mapping, policies and procedures and staff education & training. We then moved quickly into implementing a customized Privacy Management Programme, including written policy manuals, Data Impact Assessments, data governance strategies, engaging UK based processors, adding clauses to third party contracts, etc.


  • 1,000,000 Increase in App Installs
  • 127 Increase in Policies Documented

As a result of our 6 months of engagement, Carrot Rewards had retooled their practices and were able to assure the UK government (Health Department) with written proof of their GDPR compliance. The contract was potentially worth hundreds of millions of Euros, and GDPR compliance was not optional.


The Client

Health Care Providers & Services
~30 Employees
Newport Thompson

The Agency
Newport Thompson

Toronto, Ontario
~1 Employees