The DPO service

The General Data Protection Regulation (GDPR) made it mandatory for all public authorities to have a Data Protection Officer (DPO) as of May 25, 2018. A DPO is tasked with ensuring compliance with the GDPR through advice and guidance, but in many cases it is not necessary for a research and educational institution to employ a full-time DPO.

DeiC Security / DKCERT therefore offers the DPO service to universities and educational institutions that do not want to hire their own DPO or who want advice on GDPR issues.

The use of the DPO service can help provide institutions:

• knowledge of latest practices and interpretation for educational and research institutions in the EU. DeiC Sikkerhed / DKCERT participates in a pan-European network on the regulation under the auspices of GÉANT and is therefore fully updated on the latest insights in the field.
• a resource-efficient DPO service that is adapted to the needs of each institution, including the scope and nature of personal data processing.

Services to support the DPO role

For institutions that employ their own DPO, DeiC Security / DKCERT offers a number of services that ensure a robust anchoring of the DPO role. The service includes:

• advice on establishing a DPO function, including handling challenges in relation to independence, conflict of interest and impact
• preparation of tools for DPOs, e.g. a template for data protection impact assessments.
  Support for the implementation of the regulation
• opportunity to participate in a network for knowledge sharing and development of the DPO role at universities and other educational and research institutions.

The DPO service could also be used by educational and research institutions that have limited processing of personal data, want an external DPO to ensure independence or are in a transitional period in relation to the task, for example if they need temporary cover for a period.

For these institutions, we can offer:

• assumption of the role of independent DPO
• handling of ongoing challenges and dilemmas with personal data
• help to organize processes that comply with the regulation in the processing of personal data
• support of compliance with the regulation
• including experiences and knowledge from other European member states' implementation and interpretation of the regulation, for example regarding the use of consent.

Get help

You're always welcome to contact us if you need help.