Delegate both individual and corporate responsibility for GDPR-compliance to licensed professionals from Data Privacy Office Europe.
The Regulation prescribes to assign a DPO (Data Protection Officer), i.e. a person who bears responsibility for personal data protection in instances where your business entity, in the course of its work:
Works with large amounts of sensitive data, specifically health-related data, genetic and biometric data, information that can be used to reveal the individual’s racial or ethnic origin, political, religious or philosophical views.
Routinely and methodically keeps a look out for data subjects in high volumes, e.g. via CCTV-cameras, geolocation, or tracking.
A DPO is required to ensure that each and every personal data protection process within a business entity has its sole owner (process owner), who would direct the relevant activities of various departments and be held responsible for it.
Nevertheless, highly qualified DPOs to be hired are very rare. Some estimates suggest that it’s currently required to hire over 75,000 in-house DPOs in the EU only. The lack of licensed professionals is acutely felt even in Western Europe let alone countries outside the EEA.
For that reason, businesses frequently assign one of their employees to serve as a DPO, thus placing an extra burden on him/her/they, along with spending significant amounts of money and time on GDPR training courses, e.g. our GDPR Data Privacy Professional course.
There is always the risk that the DPO trained at your expense can go to another business entity, where he/she/they will be offered more favorable terms. It is also a widespread practice for a part-time DPO staff member to leave personal data tasks “for later”, as her/his/their principal work duties remain his priority.
Let us imagine a situation when the information security specialist is entrusted with the DPO responsibilities. In such a case there is a high probability that such DPO above all will deal with the technical aspects of the information security, rather than inform the subjects about the business’s processings of their personal data. And what can be said with certainty is that such a specialist will fail to duly draw up such core documents as a privacy policy or a data processing agreement.
Pursuant to the GDPR, the DPO duties can be outsourced.
Frequently, this is the most cost-effective solution, because you get an experienced and highly qualified specialist who can quickly make decisions on GDPR and be responsible for them.
Under the requirements of Article 37 of the GDPR, Data Protection Officers shall possess particular professional qualities, comprising “expert knowledge of data protection law and practices”. DPOs of Data Privacy Office Europe are internationally certified: CIPP/E, CIPM, CIPT.
Members of our team are fluent in 5 languages, for example Russian, English and German, and are also well acquainted with the specifics of the EU and CIS region.
Acquiring the DPO outsource service from us provides you not only with one narrow specialist, but with an entire team. The expertise of our team in the fields of jurisprudence, cyber security, information systems development and software is always in demand with a sufficient number of business entities.
Given that the process of meeting the GDPR requirements can hardly be conducted without optimizing several company’s business processes, DPO must possess an infrequent range of competences in privacy, management, IT that our specialists do. For instance, Siarhei Varankevich has both certificates and experience of GDPR work, as well as European MBA and experience in running his own business.
We have worked with companies in various fields (banks, airlines, manufacturing companies, online shops, social networks, mobile application developers, IT startups, pharmaceutical companies, cloud services) established both in CIS region and within the EE.
Our DPOs, taking part in international conferences and being members of the international network of experts, the International Association of Privacy Professionals, steadily improve their professional level and gain the best experience from around the globe.
Our consultants' work basis is a universally recognized Nymity Data Privacy Accountability Framework.
Our specialists sincerely love and cheer for their work, in contrast to the employee who was appointed to deal with GDPR related issues and for whom this stuff is another "pain in the neck".
CIPP/E, CIPM, CIPT, MBA, FIP
MBA, Certified Information Privacy Professional (CIPP/E), Certified Information Privacy Manager (CIPM), Certified Information Privacy Technologist (CIPT).
The Regulation prescribes to appoint a DPO while the main activity of the business entity falls within Art. 37 of the GDPR, this is, basically, on a permanent basis.
Outsourcing contracts are usually concluded by us for a period of 1 or 2 years. And, later, they are renewed in case of such a necessity.
The need to enter into contractual relations for such a long period of time is due to the fact that the work of our DPOs usually starts with the alignment of your business with the requirements of the GDPR. Only this task could take some years, on the condition of strong cooperation by your staff. Hence, we encourage you to start an engagement with the “Full” service package.
Subsequently, a DPO will be rather helpful in instances of all the modifications in your business, e.g. when it comes to a new project, process or affiliate, new staff members or contractors. However, his/her/their engagement can be less sufficient, in that case, the amount of work hours can be reduced.
Familiarization with your businesses' activities and audit of the ongoing situation. Assessment of the GDPR discrepancies (gap-analysis).
Aligning your business to the GDPR requirements to a sustainable level.
Sustaining the compliance level reached. Bringing into conformity of the incoming projects and processes.
Please contact us to schedule an online meeting with a privacy expert!
P.S. Didn’t find anything that suited your needs on the site? Put a brief description of your situation into the “Comment” field. We are very flexible and offer personalized solutions.
