Article
In-House vs Outsourced DPO: How to Decide
bdemerson.com
Quoted on this wiki
Every place a page here uses this source, in the order the words come in it.
Precedent. Ask how many regulator inquiries and notifiable breaches your best internal candidate has handled. If the answer is none and your risk profile is high, buy the experience. “Geography. List the establishments and supervisory authorities involved. More than two jurisdictions usually favors a provider with existing coverage.” Continuity. Ask what happens to the designation if the officer resigns or is unavailable for three weeks. If there is no answer, the arrangement is a single point of failure.