0203 3013384
CONTACT

Interim DPO Services – Case Study

interim dpo services case studies

We were recently approach by a Borough Council in the South East about our interim Data Protection Officer services.

Their DPO had left suddenly and they needed cover whilst they had time to recruit a new DPO for the council.

We were able to step in straight away and act as their DPO. Within a week we had been registered with the ICO, they were set up on our ticketing system and we had aligned our processes with their data protection manager so every knew what to do.

They purchased our interim DPO service for two months at a fixed rate. This included four days onsite throughout the month and four days offsite. We were able to give them a DPO from our team with years of Local Authority experience and a deputy DPO who is a qualified lawyer.

We were able to support the council through their recruiting process, shortlisting candidates and doing the first and final interviews together with the council.

We have been able to respond to all requests from the Data Protection Manager within a couple of hours, providing advice on FOIs, SARs, a data breach and risks associated to a DPIA.

The council were extremely happy with the interim services we provided, and will no doubt use us again if they need to.

For more information about our interim DPO services

related posts

Halloween-themed illustration for a blog about GDPR audits and data protection risks
Melanie Garnett

Skeletons in the Server Room

The scariest data protection risks are the ones you can’t see. From zombie data to ghost suppliers, here’s how an independent GDPR audit helps you find what’s lurking and deal with it with confidence.
These documents may have been reviewed, and oftentimes approved at Board level. You might even require employees to sign that they have understood their responsibilities in them, but the question still remains. Are your data protection policies actually working?

Policy vs practice
Having policies in place and having effective data protection compliance processes are two very different things, and having policies is not indicative that you are meeting your obligations. Even the best policy does little to protect personal data or ensure compliance if staff don’t understand it, internal processes don’t reflect it, and no one checks if it’s followed.

Read More »
Melanie Garnett
Melanie Garnett

Your data protection policies are written. Are they actually working?

While most organisations recognise internal policies such as a Data Protection, Data Breach, Retention, or Subject Access Request Policy, as vital components of the data protection compliance framework, simply having them written is only part of the equation.

These documents may have been reviewed, and oftentimes approved at Board level. You might even require employees to sign that they have understood their responsibilities in them, but the question still remains. Are your data protection policies actually working?

Policy vs practice
Having policies in place and having effective data protection compliance processes are two very different things, and having policies is not indicative that you are meeting your obligations. Even the best policy does little to protect personal data or ensure compliance if staff don’t understand it, internal processes don’t reflect it, and no one checks if it’s followed.

Read More »
Melanie Garnett
Alex Haslam

DPAS Data Protection Bulletin – September 2026

Welcome back to our monthly DPAS bulletin, where we cover the latest data protection news and developments from around the world.

Ever wondered how a routine government spreadsheet leak turns into a two-year covert court order? How about why the police might feel your mother-in-law’s contact details were key to national security? Have you ever pondered how many working weeks it takes to read a cookie banner? Whether Wall Street knows about your last GP visit? Or if you’re in Australia (g’day) why an AI is sending notes on your worst rashes to faraway cloud servers?

Read about all this and more in our latest DPAS Data Protection Bulletin.

Read More »
Alex Haslam
Bethany Meredith

Navigating SAR Chaos: Why PDF Conversion and Deduplication Are Your Secret Weapons

When a Subject Access Request lands in your inbox, the one-month clock starts ticking immediately, and the real bottleneck usually isn’t finding the data, it’s wading through duplicate files and endless email threads. Discover why deduplication and PDF conversion aren’t just nice-to-haves but non-negotiable steps in your SAR pipeline: cutting review volume by up to 60%, closing redaction loopholes, and delivering a secure, universally accessible disclosure , all while keeping your compliance team sane and your deadline intact.

Read More »
Bethany Meredith

Get a Free Consultation