The quantity of personal data being processed has never been greater, and the EU led the world in implementing the GDPR back in 2018 to help protect this data. New responsibilities have been applied to companies processing such data, with significantly increased fines for those not taking appropriate measures to protect this data.
We help develop and implement privacy program frameworks through our CIPM Consultants. From establishing the program through to maintaining and managing it, we’re involved across the operational life-cycle.
Our CIPP/E and CIPM Consultants provide contract DPO services to inform, advise and issue recommendations regarding GDPR compliance. Appropriate processes and technology are put in place to manage privacy. A light-touch Data Protection Officer Subscription Service is also available for companies seeking peace of mind.
Mandatory vs Voluntary DPO Appointment
Article 37(1) of the GDPR requires the designation of a DPO in three specific cases:
Processing carried out by a public authority or body
Regular and systematic processing on a large scale
Processing special categories of data or criminal convictions
Our clients don’t always meet any of the above criteria. However, they typically appoint a certified DPO on a voluntary, light-touch, basis because:
The role is held by someone who is busy with their day-job
They want someone to turn to when there’s a question or issue
Getting Data Protection wrong could lead to fines and brand harm
What is the maximum fine for infringing the GDPR? It’s up to the MAXIMUM of either:
4% of Global Revenue
Data Protection Officer Subscription Service
As outlined above, many of our clients prefer to have a light-touch DPO available when questions need answering. Our DPO Subscription Service provides the same services, with only the monthly time available differing on each plan.
Our Data Protection Officers are certified by the International Association of Privacy Professionals (iapp.org). Combined, the CIPP and CIPM certifications, which are both certified under ISO standard 17024:2012, prepare a successful DPO.
Subscription Plan Profiles
- Virtual Data Protection Officer Support
- Named & Certified Data Protection Officer
- Upfront & Annual Data Protection Assessment
- DPO Registered with ICO
- Phone & Email Access to DPO
- Data Protection Template Access
- DPIA | DSAR | Data Breach | Contract Clause Support
- Annual Employee Training