A data protection officer, without the salary.

Who needs an officer

Public authorities must appoint a data protection officer. So must organisations that handle sensitive personal data or process data on a large scale, and any organisation the Commissioner directs by notice. Plenty of businesses sit just outside that line and still carry real risk: clinics, brokers, schools, credit unions, anyone holding health or financial details.

Why virtual works

A full-time officer is a full salary, a desk and a training budget. For most small and medium organisations that is not realistic, and a half-interested staff member with the title is worse than nothing. A virtual officer gives you a named, experienced person who watches the calendar, answers the awkward questions and picks up the phone when something goes wrong.

What you get

• A named data protection officer, reachable when you need them
• Monthly compliance monitoring and a written report
• The annual data protection impact assessment, prepared and submitted
• Breach response with you, including the report to the Commissioner
• Policy and contract reviews as your systems change
• Staff questions answered in plain language, not legalese