The GDPR imposes an obligation on organisations to appoint a Data Protection Officer (DPO) if they meet certain requirements. For private organisations, the obligation most commonly arises if your core activities require large scale, regular and systematic monitoring of individuals (for example, online behavioural tracking activities).

DPOs assist organisations in monitoring internal compliance, informing and advising them on their data protection obligations, providing advice about Data Protection Impact Assessments (DPIAs) and acting as a contact point for both data subjects and supervisory authorities.

A DPO must fulfil a number of obligations, including being independent, an expert in data protection, adequately resourced, and reporting to higher management. The DPO role can be performed by an internal employee (subject to meeting the requirements above, particularly the independence requirement) or an external third party. A DPO can be a DPO for multiple organisations simultaneously.

There are many benefits of appointing a DPO even if an organisation is not strictly required to do so. In particular, DPOs help demonstrate compliance and accountability and can help reduce the risk of a fine or investigation by a supervisory authority. ​

DPO Assist can act as an external DPO for your organisation or, if you have your own DPO, provide advisory and support services for your DPO.​

Sole Traders

1 SAR* per month
1 hour of advice and support per month

Organisations with up to 150 employees​
3 SARs per month​
2 hours of advice and support per month​

Organisations with 151-250 employees​
5 SARs per month​
3 hours of advice and support per month​

Organisations with more than 250 employees
Bespoke

If you process any of the following types of personal data the additional pricing indicated above will apply:

Race
Ethnic origin
Politics
Religion
Trade Union Membership
Genetics
Biometric
Health
Sex life
Sexual Orientation

Personalise your GDPR
portal to match your
organisation’s branding

Each package contains a set number of Subject Access Requests which we will assist you with (SARs). Additional SARs or bundles of SARs can be purchased as above

Need the time of an expert?Purchase a consultancy package to help you with your GDPR/Data Protection Project

Data Protection Officer

Up to 3 hours per month​
2 subject access requests​ per month

EU Representation

One regulator registration​

Toolkits
Level 1 +​
Internal documents​
Staff awareness training​
Article 30 support​
Supply Chain Assessment​

Designed for SME businesses with​ up to 200 employees​