data protection function
Data Protection Officer.
Under the General Data Protection Regulation you must appoint a Data Protection Officer if you are a public authority, carry out large scale monitoring of individuals, or carry out processing of sensitive personal data. You can contract the responsibilities of the DPO out externally, which offers a cost effective solution, and ensures the legislatively mandated position is filled by an adequately trained and experienced team. Our organisation can act as your outsourced data protection officer, providing support and assistance.
Our DPO service includes:
Our DPO service includes:
- Liaison with the ICO regarding complaints, enquiries, and incidents
- Providing a yearly audit of the Information Management Framework
- Reviewing Privacy Impact Assessments for high risk projects
- Reviewing Data Protection complaints through the ICO
- Providing annual online training for the whole organisation
- A monthly newsletter with updates in case law, recent fines, and handy tips, in a language everyone in the organisation can understand
- Reviewing Data Subject Rights complaints
- Ensuring the ICO registration is accurate and up to date
Data Protection BAU.
RiverWolf can act as a full or partial data protection service for your organisation. It is a tailored service, slotting in where you need it most, but some of the many perks to choose from are:
- RiverWolf as your appointed DPO. We are adequately trained and experienced in this role.
- Annual online training for the whole organisation.
- A yearly audit of the Information Management Framework, with detailed remedial action output.
- The review of Privacy Impact Assessments for medium and high risk changes.
- A monthly newsletter with updates in case law, recent fines, and handy tips, in a language everyone in the organisation can understand.
- The review of Data Protection complaints through the ICO and direct to your organisation.
- Co-ordinating the answering Data Subject Rights, including Subject Access Requests.
- Liaison with the ICO regarding complaints, enquiries, and incidents.
- On call data breach and incident management.
- Information Asset Register template, advice, and guidance.