DPO as a service

A complete solution to your GDPR DPO responsibilities

This all-encompassing service fulfils your DPO responsibilities under Articles 38 and 39 of the GDPR. It includes:

It includes:

• A dedicated DPO as your single point of contact.
• A truly independent DPO with no conflict of interest with other business services.
• An experienced DPO with a proven track record.

What do you get?

• A dedicated DPO manager;
• Registration as DPO with the relevant supervisory authority;
• A GDPR gap analysis and remedial action plan (year 1) that prioritises key issue your organisation must address to meet compliance with the GDPR and DPA 2018;
• GDPR and DPA 2018 compliance monitoring – including managing your GDPR compliance action plan:
• Unlimited telephone and email advice within UK business hours via your dedicated GRCI Law DPO consultant;
• GDPR documentation review (policies and procedures) including a legal review for suitability and guidance on applicability Hands on support with the creation and maintenance of your personal data processing register (Article 30 record);
• Assistance with information collection to identify personal data processing activities, verifying data processing activities are GDPR and DPA 2018 compliant;
• Guidance on handling DPIAs (data protection impact assessments), DSARs (data subject access requests), data breach monitoring, management and reporting;
• Support and advice on delivering GDPR staff awareness training;
• An annual compliance audit (from year 2);
• Monthly activity reports and quarterly management reports; and
• Monthly newsletter on important GDPR and data privacy updates.

DPO as a service tiers

Conditions:

• Support is available between Monday and Friday, 9:00 am – 5:00 pm.
• Suitable for organisations where a DPO is required.

Why outsource your DPO to GRCI Law?

We only advise on data protection, privacy, and cyber and information security, which means our team has sector-specific knowledge and experience, and visibility of the latest trends, best practice, developments and challenges.

Our clients view us as part of their teams and we are known for our pragmatic, commercial advice. We won’t just identify an issue or advise on the law, we provide you with a practical solution to suit your specific needs.

•  Access to a team of expert DPOs;
•   Cost savings in recruitment, employment and retention – finding an experienced DPO with the right skill set and experience can be time consuming and expensive;
•  A service that is flexible according to your organisation’s needs, with pricing to match.

"We appointed GRCI Law as our Data Protection Officer back in 2018 having decided to outsource this important service. This was for us definitely the right course of action and GRCI Law have supported us in many different ways including data protection for staff training and specialist advice in a wide range of important areas. In particular, the initial data protection audit created a clear action plan for us to follow and we have benefited from having a good and responsive relationship with our appointed leads at GRCI Law."

-Steve Kind Director of Finance and Operations, Association of School and College Leaders

What are the requirements of the DPO role?

• Review and provide guidance on privacy policies, procedures and documentation relating to the processing of personal data - GDPR Article 39(1)(a).
• Oversee the establishment and maintenance of the personal data processing register (the Article 30 record) - GDPR Article 39(1)(a).
• Advise on the necessity for a DPIA, the manner of its implementation and outcomes - GDPR Article 39(1)(c).
• Provide guidance on data breach monitoring, management and reporting - Article 39(1)(a).
• Serve as the contact point for data protection authorities for all data protection issues - Article 39(1)(d) and (e).
• Provide advice and guidance on responses to privacy rights requests from individuals (information, access, rectification, objection, erasure, data portability) - Article 38(4).
• Facilitate GDPR awareness training and the training of staff involved in data processing operations.
• Monitor compliance with the GDPR - Article 39(1)(b).

Why GRCI Law?

Our team of qualified DPOs lawyers, barristers, cyber and information security experts have decades of experience between them and have advised on, created and delivered effective data protection solutions including:

•  Privacy and information/cyber security compliance programmes; and
•  Personal data solutions for high-profile organisations, including:
• Global multinationals;
• International banks, investment companies and leading law firms;
• Healthcare providers;
• World-leading educational institutions;
• The European Council; and
• UK law enforcement.
•  You will be supported by a dedicated DPO with access to the wider GRCI Law team’s knowledge and expertise.
•  Many of our clients find that they need more support than just a DPO. Our flexible services can grow with your business and adapt to your needs.

Need more information?

For more information about this service or to get a tailored quote, please enquire below and one of our experts will be in touch shortly.