Services
External data protection officer
A data protection officer is mandatory for public authorities and bodies, except courts acting in the administration of justice, and for controllers whose core activities consist of regular and systematic monitoring of data subjects on a large scale or of large-scale processing of special categories of data or of data relating to criminal convictions (art. 37(1)), and also where other laws require one (art. 37(4)). In all other cases designation is voluntary. The officer may be external, under a service contract (art. 37(6)).
What the Law provides
What we deliver
- ✓Informing and advising management and employees
- ✓Monitoring compliance with the Law and with internal policies
- ✓Advice on the data protection impact assessment
- ✓Cooperation with the National Centre for Personal Data Protection and acting as its contact point
- ✓Contact point for data subjects
- ✓Preparing the communication of the officer's contact details to the Centre and the text for publishing them
For whom
Controllers and processors that are required to designate a data protection officer, or choose to designate one, without taking a specialist onto their staff.
What you get
A data protection officer who carries out the tasks set by the Law, whom you can involve in good time in all matters relating to data protection and who acts as the contact point for the Centre. The officer acts independently and receives no instructions regarding the performance of his or her tasks (art. 38(3)). For clients for whom we act as data protection officer, we take on no tasks that would create a conflict of interests (art. 38(6)).
Timeframe
A monthly contract with no minimum term. We answer questions within 2 working days.
What you give us
- Involving the officer in good time in all data protection matters
- Access to information about the processing and to the people who carry it out
- Publishing the officer's contact details and communicating them to the Centre
- A contact person in the company's management
- Includes up to 4 hours of work a month
- Extra hours: 500 MDL an hour
- No minimum contract term
- We answer questions within 2 working days
How we work
- We sign a contract and issue an invoice.
- Work starts once the contract is signed.
- On request, we sign a confidentiality agreement (NDA).
- We deliver the documents by email, signed if you ask.
FAQ
Questions about this service
Do we have to designate a data protection officer?
Only in the cases set by the Law: public authorities and bodies, except courts acting in the administration of justice; controllers whose core activities consist of regular and systematic monitoring of data subjects on a large scale, or of large-scale processing of special categories of data or of data relating to criminal convictions; and where other laws require one. The price calculator flags these situations. art. 37
What qualifications does the Law require of the officer?
The officer is designated on the basis of professional qualities, in particular expert knowledge of data protection law and practice, and the ability to fulfil the tasks set by the Law. The Law does not require any particular certificate. art. 37 art. 39
Free consultation
Not sure where to start?
Request a free 15-minute consultation. We will tell you which obligations under Law No. 195/2024 apply to you and which steps are needed.