What does a DPO do?
The Data Protection Officer (DPO), known in Dutch as the Functionaris voor de Gegevensbescherming (FG), is the internal supervisor of how personal data is processed. The DPO informs and advises your organisation on its obligations under the GDPR, monitors compliance, advises on DPIAs (Data Protection Impact Assessments) and acts as the point of contact for data subjects and the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Why an external DPO from Privacy Direct?
For many organisations, employing an in-house DPO is either unnecessary or not feasible. With DPO as a service, you get an expert and independent DPO without the cost and dependency of a permanent employee.
- IndependentOur DPO is separate from your organisation and can therefore advise and supervise freely.
- Practical and pragmaticWe focus on what is genuinely needed, without unnecessary work or costs.
- ExperiencedSince early 2019, Privacy Direct has been a partner of the Dutch Ministry of Education, Culture and Science (OCW), the VO-raad (Dutch Council for Secondary Education) and the PO-raad (Dutch Council for Primary Education). We were selected as one of three preferred suppliers of DPO as a service for primary and secondary schools.
- Legal strengthAs the privacy law branch of Lievekamp Advocaten, we give you a law firm directly behind you if a matter escalates.
Easy to combine
The DPO subscription is easy to combine with:
- Privacy management and the record of processing activities;
- the Privacy Helpdesk, your first point of call for privacy questions and document reviews;
- first aid for data breaches, including notification to and handling with the supervisory authority;
- privacy audits, assessments and reports on the GDPR and related legislation.
Already have a DPO and looking for temporary support? Take a look at support and interim DPO.
Frequently asked questions
Is my organisation required to appoint a DPO?
A DPO is mandatory for public authorities and public bodies, and for organisations that monitor individuals on a large scale or process special categories of personal data on a large scale. With a privacy baseline assessment, we determine whether this applies to you and whether a DPO would be useful even if it is not mandatory.
Can the DPO be an external party?
Yes. The GDPR allows you to outsource the DPO role to an external expert. This also helps to safeguard the independence of the DPO.