COMPARE YOUR OPTIONS
Choose a workable operating model.
The right arrangement depends on recurring work, internal ownership and the outcome you need.
| Approach | When it can help | Your organisation still owns | What to agree |
|---|---|---|---|
| In-house privacy lead / DPO | Consistent work requiring dedicated internal capacity and close organisational context. | Management decisions, resources and implementation across the business. | Mandate, reporting, skills, authority and cover. |
| External / fractional DPO support | Recurring advice and review, with an internal counterpart to make and follow through on decisions. | Access to information, decisions, implementation and escalation. | Appointment versus advisory scope, capacity and response expectations. |
| A defined consultancy project | A specific review, backlog or implementation outcome with a clear handover. | Dependencies, decisions and ongoing operation after handover. | Deliverables, milestones, boundaries and acceptance. |
| An internal team using software | The people and expertise are already in place and need tools to support their process. | Interpretation, judgement, configuration and verification of outcomes. | Process ownership and how the work is checked. |
Strong internal ownership may mean that targeted advice or periodic reviews are sufficient. Outsourcing does not remove your organisation’s responsibilities.
Discuss the options