Initial review
Review processing activities, documentation, responsibilities and principal risks.
Services / External DPO
A consistent point of contact. An independent legal perspective. Support for the decisions you make every day.
Discuss your project ↗Our approach
An external DPO performs the data protection officer’s tasks under a service contract. The role includes informing and advising, monitoring compliance and cooperating with the supervisory authority. The controller retains responsibility for its processing.
The scope and specific deliverables are agreed after an initial discussion and review of your activities.
What the work includes
Review processing activities, documentation, responsibilities and principal risks.
Advice on lawful bases, transparency, retention, contracts and individual rights.
A monitoring plan, recommendations and periodic review of agreed actions.
Support with individual requests, impact assessments and supervisory authority communication.
FAQ
No. Article 37 GDPR sets out when designation is mandatory. We assess the core activities, scale and nature of processing.
Both models are possible. An external DPO offers agreed specialist support; an internal DPO brings day-to-day organisational knowledge. Both need resources, access and independence.
No. The role is advisory and supervisory. Management takes decisions and ensures implementation.
We clarify your activities, the need for a DPO, possible conflicts of interest and scope. We agree contact channels, reporting and terms.
Yes. The DPO advises on personal data, monitors compliance and provides advice on impact assessments. Decisions about purposes, means and deployment remain with the organisation so that the role stays independent.
Tell us about your organisation, challenge or planned project. We will discuss an appropriate scope of work.
Discuss your project