Clipeum IT
0333 996 4264Book a call

A data protection officer, without hiring one.

Certified data protection officers, GDPR compliance reviews and information governance from CRIBB Cyber Security. We keep you compliant, deal with the ICO and handle the requests, so your team can get on with the business.

Book a callSend us a message

CRIBB Cyber SecurityDelivered by CRIBB Cyber Security, the assurance arm of the Clipeum group

What we cover

  • DPO as a Service

    A named, certified data protection officer on a contract, fulfilling the DPO obligations many organisations now have under GDPR.

  • GDPR compliance review

    Where you stand against GDPR and the Data Protection Act, what's missing and a plan to close it, building on the work you've already done.

  • Information governance

    Registers, retention schedules, policies and the data management forms nobody wants to complete, done properly and kept current.

  • Data protection impact assessments

    DPIAs for new systems, projects and suppliers, so risk is understood before the data moves.

  • Subject access requests

    Handling access, rectification and erasure requests correctly and on time.

  • Policies and training

    Privacy notices, staff training and the awareness that stops incidents happening in the first place.

Who needs a DPO?

Public authorities, and any organisation whose core activities involve large-scale monitoring of people or large-scale processing of sensitive data, must appoint one. Plenty of others choose to because customers, funders and insurers expect it. The role must be independent and expert, which is why an outsourced DPO is often the practical answer.

Our DPOs act as your point of contact with the Information Commissioner's Office, monitor your compliance, advise on impact assessments and handle requests from the people whose data you hold. We work with UK GDPR and the Data Protection Act 2018, and with international regimes including the EU GDPR, CCPA, Australia's APPs and PECR.

Data protection questions

Do we legally need a DPO?
If you're a public authority, or your core activities involve large-scale regular monitoring of individuals or large-scale processing of special category or criminal offence data, yes. If not, you can still appoint one voluntarily, and many organisations do to satisfy customers and insurers.
Can the DPO be outsourced?
Yes. GDPR explicitly allows the DPO to be provided under a service contract, provided they're independent, expert and properly resourced. That's exactly what DPO as a Service provides.
What does the DPO actually do each month?
Monitors compliance, advises on new processing and projects, handles subject access requests and breach assessments, keeps your registers and policies current, joins your quarterly review and is the contact for the ICO.
We've had a breach. What now?
Call us. You may have 72 hours to notify the ICO, and the decision about whether to notify needs to be made and documented quickly. Our DPOs and incident response team handle this together.

Keep exploring

Talk to a person who knows IT, not a script.

Tell us what's frustrating you about your IT or security. We'll give you an honest view of what we'd change, whether or not you work with us.

Book a callSend us a message
0333 996 4264 info@clipeumit.com Take the 5-minute IT health check