Certain organisations are required by the GDPR to appoint a Data Protection Officer. We provide an outsourced DPO service, putting an experienced data protection solicitor in place as your DPO. They monitor compliance, advise on obligations, act as the contact point for regulators and data subjects, and report to management. An outsourced DPO is a cost-effective alternative to an internal appointment and integrates directly into your team.
When a DPO is mandatory
- Public authorities and bodies
- Organisations whose core activities involve large-scale, regular and systematic monitoring of individuals
- Organisations whose core activities involve large-scale processing of special category or criminal offence data
What our DPO service covers
- Monitoring UK GDPR compliance
- Advising on DPIAs and new projects
- Acting as contact point for the ICO and individuals
- Supporting data subject access requests and breaches
- Training and awareness for your team
- Regular reporting to senior management
Voluntary DPOs
Many start-ups that are not required to appoint a DPO still want expert support. An outsourced DPO or data protection lead gives you access to a specialist without hiring in-house.
Why founders choose Buckworths
Our data protection solicitors act as DPO for growing businesses. See our GDPR compliance service, or book a free consultation.
FAQs
Only if you meet the mandatory criteria. Many start-ups do not, but should still have someone responsible for data protection.
Yes. UK GDPR allows the DPO to be an employee or an external service provider.
Yes. The DPO must not receive instructions on how to perform their tasks and must not have conflicting duties.
Yes, if you appoint a DPO, their contact details must be published and provided to the ICO.