Legal Review Checklists

OMNIA Inclusion Ltd — what we ask our solicitor to confirm, document by document.

Version: 1.0 Last updated: 1 June 2026

Why this exists. Open-ended "please review this contract" briefs produce open-ended bills. The checklists below convert each legal review into a fixed, finite list of yes/no questions. Hand this page to your solicitor with the relevant document and ask them to tick the boxes. Most lawyers will quote a fixed fee against a defined checklist; very few will against "have a look at this".

How to use

1. Pick the checklist for the document under review.
2. Email the solicitor: the document URL + this checklist + the sentence "Please confirm each item is met, or flag the specific clause that needs change. We are not asking for general comment."
3. Ask for a fixed fee before they start.
4. Review their reply. Apply changes yourself where they are mechanical (clause numbering, typos, defined terms). Only return to the lawyer if a substantive redraft is needed.

Checklist A — Terms of Service

Estimated lawyer time at fixed fee: 60–90 minutes.

• Service description matches what OMNIA actually does (no over-promises that create warranty exposure).
• Limitation of liability cap is proportionate to annual fee and enforceable under UK law.
• Indemnity scope is mutual and bounded.
• Termination triggers + notice periods are reasonable.
• No "evergreen" auto-renewal trap.
• Governing law and jurisdiction are correctly stated for the target market (E&W courts for UK).
• No clauses that conflict with the embedded DPA.
• Schools acting as data controller is correctly stated.

Checklist B — Data Processing Agreement (within ToS)

Estimated lawyer time at fixed fee: 60–90 minutes.

• Meets UK GDPR Art. 28(3) mandatory terms.
• Meets EU GDPR Art. 28(3) mandatory terms.
• Sub-processor consent mechanism is workable (general authorisation + 30-day notice).
• International transfer safeguard (UK IDTA or SCCs) referenced correctly.
• Breach-notification timeline matches our Breach SOP (72 hours to school).
• Data-subject-rights assistance scope is proportionate.
• Audit rights are bounded (annual letter, not on-site).
• Return-and-deletion terms match published retention schedule.

Checklist C — Privacy Policy

Estimated lawyer time at fixed fee: 30–45 minutes.

• All ICO-required notice items (Arts. 13/14) present.
• Lawful basis stated correctly per processing purpose.
• Children's data section meets ICO Age-Appropriate Design Code where applicable.
• Sub-processor list referenced + linked.
• DSR mechanism + 30-day SLA stated.
• Cookie disclosure consistent with cookie notice.

Checklist D — UAE Jurisdiction Addendum

Estimated lawyer time at fixed fee: 60–90 minutes. (See addendum closing notice — the residual scope is now two items only.)

• Arbitration centre election (DIAC seat-DIFC vs ADCCAC seat-ADGM) appropriate for the specific Emirate.
• PDPL "foreign processor representative" requirement: confirm whether appointment is operative today or deferred to Executive Regulations.
• PDPL article citations are correct in the version filed today.
• ADEK School Digital Policy v1.1 reference is current.
• No conflict with the underlying DPA international addendum.

Checklist E — International Data Transfer Addendum

Estimated lawyer time at fixed fee: 30–45 minutes.

• UK IDTA Part 1 (tables) correctly populated.
• Selected EU SCC modules correctly identified (Module 2: controller-to-processor; Module 3: processor-to- sub-processor).
• Transfer-impact assessment summary present.
• Sub-processor list current.
• No conflict with jurisdiction-specific addenda (UAE etc.).

Checklist F — Breach Notification SOP

Estimated lawyer time at fixed fee: 30 minutes. (Operational, not strict legal — most lawyers will only sanity-check.)

• ICO notification 72-hour clock correctly stated.
• UAE Data Office notification mechanism stated correctly for regime in force.
• School notification timeline matches DPA commitment.
• Pre-drafted notice letters do not over- or under-state.
• Roles and approvers named.

Checklist G — Sub-processor Change Template

Estimated lawyer time at fixed fee: 15 minutes. (One-off sign-off; reusable forever after.)

• Notice period (30 days) matches the DPA.
• Objection mechanism stated.
• Adequacy / SCC / IDTA position stated.

Bundling guidance

For maximum cost efficiency, send all checklists in a single email with a single fixed-fee request. Total estimated lawyer time across all seven checklists: 4–6 hours. Typical fixed-fee quote: £600– £1,200 all-in.

This replaces a 2026-baseline open-ended review of the same documents, which would run 12–25 hours at £3,500–£8,000.

Version history