External Data Protection Officer
Appointed external DPO for companies in Germany and the EU.
Certified External Data Protection Officer (GDPR)The situation
You are required to appoint a DPO, or you don't want to fill the role internally — and you need someone who actually performs the duties rather than lending a name.
Companies with more than 20 employees that regularly process personal data are required to appoint a data protection officer. Violations can result in substantial fines.
What I deliver
- Formal appointment and notification to the supervisory authority
- Ongoing monitoring of GDPR and German BDSG compliance
- Point of contact for employees, customers and authorities
- Handling data subject requests and personal data breaches
- Annual data protection report and action plan
- Regular training and awareness sessions
Typical formats & duration
- Monthly retainer with an agreed capacity
- Onboarding phase: 4–8 weeks
- Committed response times for data breaches
A data protection officer based in Düsseldorf – serving NRW and the entire German-speaking market
My practice is located in Düsseldorf — a short distance from the LDI NRW, the data protection supervisory authority for North Rhine-Westphalia. Companies in Düsseldorf, the Rhineland, the Ruhr region and across NRW I support personally on site; beyond that, I support companies digitally throughout Germany and the EU.
- On-site appointments in Düsseldorf, the Rhineland, the Ruhr region and all of NRW
- Short lines to the supervisory authority: LDI NRW in Düsseldorf
- Familiar with the NRW economy — industry, retail, agencies and law firms
- Training and awareness sessions delivered at your premises
FAQ: costs & how we work together
What does an external data protection officer cost?
Pricing depends on your company's size, industry and the complexity of your data processing. I work with a transparent monthly retainer including a fixed capacity — no hidden fees, no per-minute billing. After an initial, non-binding call you receive a written fixed-price quote.
What is included in the monthly fee?
Ongoing GDPR compliance monitoring, acting as point of contact for data subjects and supervisory authorities, handling access and erasure requests, the annual data protection report, training, and committed response times for incidents. Additional projects such as DPIAs or contract negotiations are quoted separately at clearly agreed terms.
How quickly can the appointment take effect?
After the first call, onboarding typically takes 4 to 8 weeks and covers the formal appointment, notification to the supervisory authority and initial documentation. If time is critical — an upcoming audit or customer request — I accelerate the process.
Free download
GDPR & AI Act checklist for development projects
The questions I ask first in software and AI projects — as a compact checklist for your product and engineering team.
- Privacy by design: what to settle before the first commit
- Roles, processing agreements and international transfers
- AI Act risk classification in five steps
No newsletter, no sharing with third parties.
Let's talk about your project
30 minutes, free and without obligation. Afterwards you'll know whether and how I can help.
