DPO Services
The role of the Data Protection Officer is key in order to ensure a company’s compliance with privacy regulations. You can rely on Argo for professional service and to ensure proper management of personal data.
Who is the DPO
Which Companies and Organizations Are Required to Appoint a DPO?
The data controller and the data processor must systematically designate a Data Protection Officer (DPO) whenever:
- The processing is carried out by a public authority or body, except for courts acting in their judicial capacity;
- The core activities of the controller or processor consist of processing operations which, by their nature, scope, and/or purposes, require regular and systematic monitoring of data subjects on a large scale;
or - The core activities of the controller or processor consist of processing, on a large scale, special categories of personal data as defined in Article 9, or personal data relating to criminal convictions and offences as per Article 10.
According to the Data Protection Authority, based on these conditions, the following entities are required to appoint a DPO: providers of public services (local public transport, waste collection, water services management, etc.), credit institutions, insurance companies, credit information systems, financial companies, commercial information companies, auditing firms, debt collection agencies, security companies, political parties and movements, trade unions, tax assistance centers (CAF) and social security patronages, utility companies (telecommunications, electricity or gas distribution), employment agencies and recruitment companies, healthcare providers and diagnostic/prevention entities such as private hospitals, spas, medical laboratories, and rehabilitation centers, call centers, IT service providers, pay-TV service providers.
What activities do we perform as DPO?
- We inform and advise the data controller or processor, as well as the employees involved in data processing, about their obligations under the GDPR and other Union or Member State data protection provisions.
- We monitor compliance with the GDPR, other relevant Union or Member State data protection legislation, and the policies of the controller or processor relating to personal data protection, including responsibility assignment, awareness-raising, training of staff involved in processing, and related monitoring activities.
- Upon request, we provide advice regarding Data Protection Impact Assessments (DPIAs) and monitor their performance pursuant to Article 35.
- We cooperate with the supervisory authority
- We act as the contact point for the supervisory authority on issues related to data processing, including prior consultation under Article 36, and carry out consultations on any other data protection matters as necessary.