What is it?

The outsourced DPO (or Data Protection Officer) is an external service to the company that provides an independent, autonomous view without conflict of interest, with the expertise necessary to execute the duties imposed on the data protection officer by the LGPD.

Who is it for?

• For any company, including small and medium-sized ones, whether because they are obliged by the LGPD due to the amount and type of data they hold, or as a measure of good market practices. Among the advantages of the outsourced DPO service, we can mention its reduced cost compared to an internal DPO hired under the CLT regime, who often will not have the necessary expertise or even enough demand to act exclusively in this activity;
• Companies that have not yet appointed their data protection officer or that have appointed a DPO with an accumulation of tasks and/or duties (which can lead to a conflict of interest, in addition to a lack of autonomy, contrary to the ANPD's guidelines);
• For companies that have a privacy committee made up of internal members and need a data protection officer.

What are their responsibilities?

• Receive communications from data subjects, provide clarification, and suggest actions;
• Interact and be the point of contact with the National Data Protection Authority (ANPD) and other entities, receiving communications and suggesting actions;
• Monitor new regulations regarding data protection;
• Guide, train, and communicate with employees and contractors regarding awareness and practices to be adopted concerning personal data protection;
• Provide technical support in the development of projects involving personal data, and may suggest new projects;
• Act in personal data breach incidents, contingency plans, and incident response;
• Implement and lead the privacy committee or similar sector or body;
• Assist in compliance with data protection legislation and other applicable rules, including the awareness and training of professionals competent for data processing operations;
• Draft data protection clauses to be included in contracts and other contractual instruments;
• Execute other duties determined by the company or established in complementary rules.