Outsourced DPO for Irish businesses
Outsourced Data Protection Officer for Irish Businesses
A named Data Protection Officer and ongoing GDPR support for a fixed monthly fee, without hiring one in-house.
From €750 per month
- A named DPO as your point of contact for data protection
- Support with DPIAs, data breaches and subject access requests
- Help responding to Data Protection Commission correspondence
- Fixed monthly fee with a clear scope
Request a DPO proposal
Business enquiries only. Tell us about your organisation and we will send a written proposal.
Prefer to talk? Call 085 804 1664.
Who this is for
Organisations that must appoint a DPO
Public bodies, and organisations whose core activities involve large-scale monitoring of people or large-scale processing of special-category data, are required by GDPR to designate a DPO.
Health, childcare, education and membership bodies
If you hold health, children’s or other sensitive records, a DPO gives you a clear owner for data protection.
Firms asked for a DPO by a customer
Tenders and enterprise customers often ask who your DPO is. An outsourced DPO lets you answer.
SMEs without in-house expertise
You get ongoing data protection support without adding a full-time role.
What you get
Included
- Designation as your organisation’s DPO, with contact details you can publish and notify to the Data Protection Commission
- A regular review of your processing activities and records
- Advice to staff on day-to-day data protection questions
- Support with DPIAs for new projects and systems
- Support when a data breach or subject access request arrives
- A point of contact for the Data Protection Commission and for individuals
Not included
- Legal advice or representation
- Acting in court or tribunal proceedings
- IT security testing or implementation
- Any guarantee of compliance: responsibility for compliance stays with your organisation
How it works
Scoping call
We learn what your organisation does, what data it holds and what support it needs.
Written proposal
You receive a proposal with the scope and the fixed monthly fee.
Start
We agree a start date, complete the designation and begin the first review.
Pricing
From €750 per month
The monthly fee depends on your headcount, the volume and sensitivity of the data you process, and how much support you need. The fee and scope are agreed in writing before you commit.
Who does the work
The work is led by Dylan Holland of Plus Promotions Limited. You deal with the same person from scoping through delivery.
When is a DPO mandatory in Ireland?
Article 37 of the GDPR requires a Data Protection Officer in three situations: where the organisation is a public authority or body; where its core activities involve regular and systematic monitoring of individuals on a large scale; and where its core activities involve large-scale processing of special-category data, such as health data, or data about criminal convictions.
Organisations outside those categories can still appoint a DPO voluntarily. If they do, the same GDPR rules on the DPO’s position and tasks apply.
Outsourced DPO or in-house DPO?
The GDPR allows the DPO to be a staff member or an external provider working under a service contract. Either way, the DPO must be chosen for expert knowledge of data protection law and practice, must be able to act independently, and must report to the highest level of management. An outsourced DPO suits organisations that need the role filled but do not have enough work, or the in-house expertise, to justify a full-time hire.
Outsourced DPO
Fixed monthly fee. No recruitment or training cost. Independent of internal reporting lines. Scales with the support you need.
In-house DPO
Salary and ongoing training cost. On site every day. Must be protected from conflicts of interest with other duties.
Questions
Does my business have to appoint a DPO?
GDPR requires one for public authorities, for organisations whose core activities involve regular and systematic monitoring of people on a large scale, and for those processing special-category data on a large scale. Others may appoint one voluntarily. We can help you work out which applies.
What does an outsourced DPO do each month?
Reviews your processing, answers staff questions, supports DPIAs, breaches and access requests, and keeps management informed of data protection risks.
Is the DPO notified to the Data Protection Commission?
Yes. An organisation that designates a DPO must publish the DPO’s contact details and communicate them to the Commission. We help you do that.
Is there a minimum term?
The term is set out in your proposal before you commit.
Can you guarantee we are compliant?
No. Nobody can honestly guarantee that. A DPO reduces your risk and gives you a clear record of the steps you have taken.
Are you solicitors?
No. This service is provided by Plus Promotions Limited, a compliance consultancy. We are not a solicitor’s practice and do not give legal advice. If a matter needs a solicitor, we will tell you.
Related GDPR guides
- Do you need a Data Protection Officer in Ireland?
- GDPR for small businesses in Ireland
- Data breach: the 72-hour response guide
- Handling a data subject access request
- GDPR and employee data: employer guide
- GDPR consent in Ireland
- GDPR fines and the Data Protection Commission
- Privacy and cookie policies for Irish websites
Other services: Outsourced DPO · GDPR compliance projects · GDPR audit and gap analysis · DPIA support
Request a DPO proposal
Or call 085 804 1664
Looking for help with your own data rights as an individual? Contact the Data Protection Commission.