Outsourced Data Protection officer service

Under UK law, you must appoint a DPO if:

• You’re a public authority or body
• Your core activities require large scale, regular and systematic monitoring of individuals, or
• Your core activities consist of large-scale processing of special categories of data or data relating to criminal convictions and offences

Not sure? You might find the Do I need a Data Protection Officer (DPO)? online quiz helpful.

Examples of organisations who need a DPO

• An HR service provider who works for clients and so processes personal data as part of their core activities.
• A large retail website who monitors what their customers search for and buy so they can better promote relevant products to them.
• A company planning an advertising campaign which targets customers using personal details stored by the company.
• A haulage company that tracks their drivers’ location as they make deliveries.
• A medical research company that uses biometric or genetic data.

The hassle-free route to a Data Protection Officer

You can appoint a DPO internally. However their work can’t result in a conflict of interests with their DPO duties. You must also appoint a Data Protection Officer with expert knowledge of data protection law.

How an outsourced Data Protection Officer service works

We can:

• Deal with staff data protection queries
• Sort out customer enquiries, such as erasure requests and subject access requests
• Give advice on privacy laws if you have website domains in different countries
• Carry out investigative research
• Deliver Data Protection Impact Assessments (DPIA) for major projects requiring the processing of personal data
• Provide compliance reports for your CEO or Board of Directors

The advantages of appointing an outsourced DPO

• More affordable than employing someone part-time or full-time
• You benefit from extensive experience and best practice
• Your Dunwell Data Protection Officer will have UK, European and global expertise so can help if you have plans to expand internationally

Does a DPO need to be a full-time role?

No, you don’t need to appoint a DPO full-time. But you do need someone with specialist knowledge. You can contract out the role of a DPO externally to us.

Does an outsourced DPO need to be on site all the time?

No, a DPO can work remotely and visit any on site premises as and when needed.

Take the first step towards peace of mind

If you’d like to learn more about appointing an outsourced data protection officer, please call us on 07534258800 or email samantha@dunwelldataprotection.co.uk

More ways we can help

Check out our other data protection and ePrivacy services.