Skip to main content
Praxikon

Privacy

A data protection officer you do not have to employ yourself

An external DPO for organisations that must or want to have one: independent, with fixed hours and a fixed point of contact for the supervisory authority.

from €950 per monthabout two hours per week

12 months

Who it is for

  • Public authorities, which must always designate a DPO
  • Organisations that process sensitive data or monitor people on a large scale
  • Organisations that want a DPO without filling a full position

Not for: Organisations looking for someone who both designs and reviews privacy: that conflicts with the DPO’s independence

What you get

  • Registration as DPO with the Dutch Data Protection Authority
  • Advice on DPIAs, data breaches and data subject requests
  • Monitoring compliance with an annual plan and an annual report
  • Fixed hours per month and a fixed point of contact

The law behind it

Every finding links to the explanation on this site, with the legal provision. You do not have to take my word for it.

How it works

  1. 1

    A 30-minute call

    You explain where you stand. I tell you honestly whether I can help and what it costs.

  2. 2

    Proposal within three working days

    Fixed scope, fixed price and a schedule. The same price as on this site.

  3. 3

    Delivery, signed

    You receive the deliverable with my name under it, and thirty days for follow-up questions.

Price and terms

from €950 per monthabout two hours per week

You receive a proposal with a fixed scope and the same price as here, up front. If you started with a scan or check and begin a subscription within three months, we credit that fee.

Praxikon is a trade name of Embed AI (Dutch Chamber of Commerce 90283597). Proposal, terms and invoice are in that name. Prices exclude VAT.

Questions

What does an external DPO cost?

from €950 per month excluding VAT, about two hours per week. Lead time: 12 months. You receive a proposal with a fixed scope and the same price as on this page up front. The contracting party is Embed AI (Dutch Chamber of Commerce 90283597).

Do we need a DPO?

A public authority always. Another organisation if its core activity consists of large-scale, systematic monitoring of people or large-scale processing of special category or criminal data (Article 37 GDPR). The decision tree at Article 37 helps you decide.

A 30-minute call

Tell me where you stand.

I tell you honestly whether I can help, and what it costs. Within three working days you have a proposal with a fixed price.