Our Services

eData Protection Officer.

Data Protection Officer’s (DPO’s) are becoming more common in organisations as the need to secure, manage and take control of data becomes essential. At Acuity, we offer an eData Protection Officer (eDPO) service, which works closely with your organisations to help insure compliance; training your staff on data handling practices; maintaining knowledge of changes in law and tech and building, implementing and managing privacy programs.

Primary eDPO Skills

  • Risk and Technology: Assessing risk and best practice mitigation
  • Management System/Framework: Practical experience in designing and building management systems for the full operational life cycle
  • Legal Expertise and Independence: Knowledge of EU legislation plus all relevant jurisdictions (including outsourcing activities/supplier services)
  • Cultural/Global: Interpersonal skills, flexibility and ability to effectively communication with relevant business functions (Legal, IT, HR, Marketing etc.)
  • Leadership: Both leadership and program management experience, managing own professional development at independent and board level; fulfilling the role autonomously
  • Communication: Ability to speak in a ‘common language’ in sync with the average employee and external data subject, handing requests, complaints and helping others assist data subjects
  • Conflict Management: Provide advice, guidance and avoid conflict with internal management roles wherever possible

Primary eDPO Functions

  • Working with regulators: The eDPO will be acquainted with relevant regulations (in jurisdictions where the organisation does business) and have a positive working relationship with them
  • Accessibility to data subjects: The Article 29 Working Party has stressed the importance of DPO’s being available to answer data subject’s questions
  • Assessing privacy risk: It is not the eDPO’s role to carry out privacy impact assessments, however the eDPO must monitor them and provide the controller with advice on them, including when to conduct one, methodology, whether to outsource it, selecting safeguards/controls and ensuring compliance
  • eDPO dismissal and penalties: An eDPO may not be penalised for performing DPO-related duties
Scroll Down