# External data protection officer Source: https://conformitate.md/en/services/external-dpo Services A data protection officer is mandatory for public authorities and bodies, except courts acting in the administration of justice, and for controllers whose core activities consist of regular and systematic monitoring of data subjects on a large scale or of large-scale processing of special categories of data or of data relating to criminal convictions (art. 37(1)), and also where other laws require one (art. 37(4)). In all other cases designation is voluntary. The officer may be external, under a service contract (art. 37(6)). ## What the Law provides 1. Article 37 [Designation of the data protection officer](https://conformitate.md/en/law-195-2024/article-37) 2. Article 38 [Position of the data protection officer](https://conformitate.md/en/law-195-2024/article-38) 3. Article 39 [Tasks of the data protection officer](https://conformitate.md/en/law-195-2024/article-39) ## What we deliver - ✓ Informing and advising management and employees - ✓ Monitoring compliance with the Law and with internal policies - ✓ Advice on the data protection impact assessment - ✓ Cooperation with the National Centre for Personal Data Protection and acting as its contact point - ✓ Contact point for data subjects - ✓ Preparing the communication of the officer's contact details to the Centre and the text for publishing them For whom Controllers and processors that are required to designate a data protection officer, or choose to designate one, without taking a specialist onto their staff. What you get A data protection officer who carries out the tasks set by the Law, whom you can involve in good time in all matters relating to data protection and who acts as the contact point for the Centre. The officer acts independently and receives no instructions regarding the performance of his or her tasks (art. 38(3)). For clients for whom we act as data protection officer, we take on no tasks that would create a conflict of interests (art. 38(6)). Timeframe A monthly contract with no minimum term. We answer questions within 2 working days. What you give us - Involving the officer in good time in all data protection matters - Access to information about the processing and to the people who carry it out - Publishing the officer's contact details and communicating them to the Centre - A contact person in the company's management External DPO from 3,600 MDL / month - Includes up to 4 hours of work a month - Extra hours: 500 MDL an hour - No minimum contract term - We answer questions within 2 working days [Request a quote →](https://conformitate.md/en/services/external-dpo?pkg=dpo#oferta) ## How we work - We sign a contract and issue an invoice. - Work starts once the contract is signed. - On request, we sign a confidentiality agreement (NDA). - We deliver the documents by email, signed if you ask. FAQ ## Questions about this service ### Do we have to designate a data protection officer? Only in the cases set by the Law: public authorities and bodies, except courts acting in the administration of justice; controllers whose core activities consist of regular and systematic monitoring of data subjects on a large scale, or of large-scale processing of special categories of data or of data relating to criminal convictions; and where other laws require one. The price calculator flags these situations. [art. 37](https://conformitate.md/en/law-195-2024/article-37 "Designation of the data protection officer") ### What qualifications does the Law require of the officer? The officer is designated on the basis of professional qualities, in particular expert knowledge of data protection law and practice, and the ability to fulfil the tasks set by the Law. The Law does not require any particular certificate. [art. 37](https://conformitate.md/en/law-195-2024/article-37 "Designation of the data protection officer") [art. 39](https://conformitate.md/en/law-195-2024/article-39 "Tasks of the data protection officer") ### If we designate an officer voluntarily, do the same rules apply? Yes. An officer designated voluntarily has the same position and tasks, acts independently, and their contact details are published and communicated to the Centre. [art. 37](https://conformitate.md/en/law-195-2024/article-37 "Designation of the data protection officer") [art. 38](https://conformitate.md/en/law-195-2024/article-38 "Position of the data protection officer") [art. 39](https://conformitate.md/en/law-195-2024/article-39 "Tasks of the data protection officer") ### Is the officer liable instead of the company? No. The controller remains responsible for complying with the Law and must be able to demonstrate it. The officer informs and advises, monitors compliance and is the contact point for the Centre and for data subjects. [art. 5](https://conformitate.md/en/law-195-2024/article-5 "Principles relating to processing") [art. 24](https://conformitate.md/en/law-195-2024/article-24 "Responsibility of the controller") [art. 38](https://conformitate.md/en/law-195-2024/article-38 "Position of the data protection officer") [art. 39](https://conformitate.md/en/law-195-2024/article-39 "Tasks of the data protection officer") Related pages [Data protection officer under Law 195/2024: when required](https://conformitate.md/en/law-195-2024/data-protection-officer) [Medical & dental clinics](https://conformitate.md/en/industries/medical-clinics) [Inspection by the Centre](https://conformitate.md/en/situations/inspection-by-the-centre) [Case study: medical clinic](https://conformitate.md/en/case-studies/medical-clinic) --- Provider: conformitate.md · RIGHT CONSULT COMPANY (IDNO 1022600002005) · MD-2072, mun. Chișinău, sect. Botanica, str. Grenoble 259/6, of. 57 Phone: +373 767 27 667 · Email: contact@conformitate.md Prices: https://conformitate.md/en/pricing