Data Protection Advisory Service

GDPR: Do you really need a Data Protection Officer?

Many companies are finding that there is a market shortage of individuals trained to handle the DPO’s responsibilities. Tapping into external expertise will help your organisation address the compliance demands of the GDPR while staying focused on your core business activities.

What is the Northdoor Data Protection Advisory Service?

With this annual subscription service, you can rapidly and cost-effectively access the expertise you need for addressing GDPR compliance. Via a simple subscription, Northdoor provides an expert Data Protection Advisor as required to serve as an independent data protection specialist. Your Advisor can assist with the implementation of privacy-by-design and data protection impact assessments, serve as the contact point for data protection authorities, and oversee data breach management and reporting.

Northdoor can provide the following related services:

Outlining a GDPR compliance programme based on findings from the GDPR Rapid Response program report.
Advising on data protection and information security matters pertaining to the GDPR.
Reviewing and advising on privacy policies, procedures and documentation.
Monitoring the collation of records of personal data processing operations.
Informing the training of staff involved in data processing operations.
Advising on data protection impact assessment (DPIA), their implementation and their outcomes.
Serving as the contact point for data protection authorities for all data protection issues.
Data breach management and reporting.
Serving as the contact point for data subjects on privacy matters, including subject access requests.

DPO Advisory Service PDF

How to tell if you need a Data Protection Officer

GDPR sets out just three cases in which you must appoint a DPO; does your business fall into these categories?

Your organisation is a public authority or body

In the UK, all government departments, agencies and other public bodies must appoint a DPO. This includes local councils: 15% of which have yet to appoint a DPO (ICO, March 2017).

Your core business activity is monitoring individuals regularly and systematically on a large scale

Surprisingly, this can include paying employees, providing standard IT support, email remarketing and location tracking through apps.

Your core business activity consists of processing large-scale special categories of personal data or data relating to criminal offences

GDPR defines ‘special categories of personal data’ as ethnic origin, political opinions, religious beliefs, physical and mental health (among others). If you process this type of data on a large scale, including data relating to criminal offences, you must appoint a DPO.

Fast Access to DPO Skills

If you are not sure whether you even need a DPO, Northdoor can help.

Based on a fast, low-cost GDPR Rapid Response exercise, we can determine your requirements and get you on track for compliance. And if you do need a DPO, we can help you address compliance while minimising additional costs and maximising flexibility.

Industrialisation services from Northdoor

Building on expert knowledge of both enterprise data management and legislation, Northdoor has created a suite of eight services around the GDPR. Download PDF.

Find out more