# Hire an external DPO, with AI oversight (data protection officer)

> A DPO who also keeps an eye on your AI, without hiring anyone

Page: https://www.praxikon.com/en/diensten/externe-fg
Updated: 2026-10-22
Provider: Praxikon, a trade name of Embed AI (Dutch Chamber of Commerce 90283597), Rivium Westlaan 46, 2909 LD Capelle aan den IJssel, the Netherlands. The work is done by Zahed Ashkara, freelance AI and privacy legal adviser, exclusively as a freelancer.

An independent data protection officer with fixed hours and a fixed point of contact, who also keeps your AI register and reviews new AI applications.

## Price and terms

Fixed monthly fee, matched to your organisation, agreed up front.

## Who it is for

- Municipalities, schools, healthcare institutions and other public authorities, which must always designate a DPO
- Organisations that process sensitive data or monitor people on a large scale
- Organisations that use AI and want one fixed point of contact for privacy and AI

## Not for

- Organisations looking for someone who both designs and reviews privacy: that conflicts with the DPO’s independence

## What you get

- Registration as DPO with the Dutch Data Protection Authority
- Advice on DPIAs, data breaches and data subject requests
- Keeping the AI register and reviewing every new AI application or supplier
- An annual plan, quarterly report and annual report for the board
- Fixed hours per month and a fixed point of contact

## How it works

1. **A 30-minute call**: You explain where you stand. I tell you honestly whether and how I can help.
2. **Proposal within three working days**: Fixed scope, fixed price and a schedule, within three working days. No open end.
3. **Delivery, signed**: You receive the deliverable with my name under it, and thirty days for follow-up questions.

## Lead time

12 months, then cancellable per quarter

## The law behind it

- art. 37 AVG: https://www.praxikon.com/en/avg/artikel/37
- art. 38 AVG: https://www.praxikon.com/en/avg/artikel/38
- art. 39 AVG: https://www.praxikon.com/en/avg/artikel/39
- art. 26 AI Act: https://www.praxikon.com/en/ai-act/artikel/26

## Questions

### What does an external DPO cost?

A fixed monthly fee, depending on the size of your organisation and the number of hours. After a 30-minute call you receive a proposal within three working days, with the fee that applies for the whole term. The contracting party is Embed AI (Dutch Chamber of Commerce 90283597).

### Do we need a DPO?

A public authority always. Another organisation if its core activity consists of large-scale, systematic monitoring of people or large-scale processing of special category or criminal data (Article 37 GDPR). The decision tree at Article 37 helps you decide.

### What does the AI oversight involve?

The AI Act has no mandatory officer like the DPO. You do need to know which AI you use, what your role is and which obligations come with it. I keep the register, review every new application and report every quarter.

### Who does the work?

Zahed Ashkara, freelance AI and privacy legal adviser, does the work himself and puts his name under the deliverable. He works exclusively as a freelancer, not through secondment or employment.

### When can the work start?

We agree the start date in the 30-minute call. Send the question or assignment description in advance, and you will know in that call whether and when it fits.

## Contact

- Book a 30-minute call: https://cal.com/zahed-ashkara/30min-en
- Email: info@embedai.nl

_This text is the Markdown version of the service page; where they differ, the page prevails._