Preparing for GDPR compliance
Article 37 of the General Data Protection Regulation (GDPR) mandates the appointment of a Data Protection Officer (DPO) for all public authorities and other organisations where the core activities of the controller or the processor involve “regular and systematic monitoring of data subjects on a large scale” or where the entity conducts large-scale processing of “special categories of personal data”.

The role of the DPO can be more than just one individual – this post oversees a host of data privacy and security processes and controls intended to comply with the new GDPR requirements. Initially developing and implementing a truly comprehensive DPO programme will require time and resources many organisations simply don’t have as we head towards the GDPR implementation date of 25 May 2018.

Tactical and strategic support to build your DPO programme
Getting a GDPR-compliant data protection programme off the ground is no easy task. Kroll partners with consummate data privacy law firms to provide DPO consultancy services to support your existing privacy and security capabilities in becoming compliant and staying in compliance with GDPR and other local E.U. data privacy requirements. Kroll leverages our team’s experience and expertise in information privacy and security challenges, as well as risk assessments and investigations performed on a global scale. We can help organisations avoid conflict of interest issues in the performance of this role by providing consultancy services from an independent perspective. We can be accountable directly to the C-Suite.

Strengthen your data privacy programme
There are countless challenges ahead of GDPR, with the mandatory DPO appointment being potentially challenging as requirements outnumber the qualified individuals available. Count on our team of data protection consultants to become your partners in this task.