DPO service agreement

Public organizations are required to appoint a DPO. Certain types of private companies must appoint a data protection adviser (DPO). Finally, it can show responsibility that one has appointed a DPO.

The service covers your need for a DPO. When we have the role, we are involved, for example

• by considering and deciding how to comply with the data protection rules and documenting that
• for IT security considerations, including data protection through design and default settings,
• in negotiations with an IT provider who has to process a lot of personal data,
• when assessing whether you should prepare an impact assessment and
• when preparing IT tender material.

To ensure real involvement, you must give the DPO's access to the top management level, so that the statutory reporting on compliance with the data protection law rules can take place.

Compliance with the GDPR is ultimately the responsibility of management. And that's exactly why a DPO is training from Unitas also ongoing management of the organization in understanding the responsibilities they have. We thus make a virtue out of ensuring that the entire organization comes on board, so we avoid silos, as data protection and compliance are activities that go across the organization.

In practical terms, we will work with you to organize precisely the DPO service that makes sense to you, so that we uncover the need for advice in interaction with your existing employees.

See Unitas' Compliance-as-a-Service, where in addition to the DPO role, we also handle the day-to-day operational work in connection with compliance with the GDPR.