Frequently Asked Questions
See our frequently asked questions below.
Prefer personal contact?
Talk to our experts
Anything still unclear?
Frequently asked questions
Read the frequently asked questions below. If your question is not listed, you can always reach us by phone at +31 6 58832812 or email us at Info@ThePrivacyCoOperation.nl
Can a DPO also be appointed for a short period, for example because the current DPO is ill or has announced that they are leaving the organization?
The Privacy CoOperation offers the option of "DPO as an e-service." You can appoint a DPO for the time you need to fill the position (again) on a permanent basis.
How long do most of the assignments you offer take?
This varies per project. We have both short-term assignments lasting a few weeks and long-term projects that can last several months to a year.
Can you help negotiate rates?
Yes, we support you in determining a competitive rate and can negotiate with clients on your behalf to ensure fair compensation.
How often can I expect assignments from you?
This depends on your specializations and availability, but thanks to our extensive network in the privacy sector, we can regularly offer suitable assignments.
What are the advantages of secondment through your organization?
As a freelancer in the privacy sector, you can work with us without any worries. Thanks to our G-account, we comply with the latest regulations on bogus self-employment, so you can safely accept assignments. We offer access to exclusive projects with reputable clients and take care of all the administration, such as contracts and payments, for you. In addition, you become part of a professional network, which increases your chances of new and long-term assignments. This allows you to focus fully on your work and grow your career.
As a freelancer, do I still have complete freedom if I work through you?
Yes, you retain complete freedom. As a self-employed person, you decide which assignments you accept and how you carry out the work, within the agreements made with the client. We offer you the assignments, but you are in control of your own schedule and choices. Moreover, you remain responsible for your own entrepreneurship.
I want to apply privacy by (re)design to a number of processes within my organization. Can you help me with this?ย
Privacy by design is a principle within the GDPR: apply privacy when designing a process. Often, there are already ongoing processes where privacy still needs to be applied: privacy by redesign. Our specialists play an active, guiding role if you want to apply this principle. They have knowledge of PETs (Privacy Enhancing Tools) to quickly apply privacy by (re)design.ย
I need an answer to a specific question regarding privacy and information security in the short term. How can this need be met?ย
You can agree with The Privacy CoOperation that specific questions regarding privacy and information security will be answered within a certain period of time. This helpdesk service can be purchased on an hourly basis or via a subscription. This means you will always receive advice and assistance when you need it.ย
I need a privacy or information security specialist at short notice to supplement or strengthen my team. How can this need be met?ย
The Privacy CoOperation has a large network of privacy and information security specialists with the right background, training, and experience. We expect to be able to meet your specific needs in the foreseeable future, allowing you to continue with your core business.
What is the level of expertise of a DPO who is deployed at my organization, whether temporarily or permanently?
The Privacy CoOperation works exclusively with DPOs who have at least five years of experience in advising and supervising with regard to the GDPR. The Privacy CoOperation offers the appointed DPO a network of other DPOs, so that he or she can draw on a broad pool of knowledge and experience when necessary. This ensures that your organization receives the best possible support.
Can a DPO also be appointed for a short period, for example, because the current DPO is ill or has announced their departure from the organization?
The Privacy CoOperation offers the option of a โDPO as an e-service.โ You can appoint a DPO for the period you need to structurally fill the position (again).
Is my organization required to appoint a data protection officer?
In certain cases, an organization is required to appoint a DPO. For example, government agencies are required to appoint a DPO. Organizations that process data in a manner that, due to its nature, scope, and/or purpose, requires regular and systematic observation of data subjects on a large scale are also required to appoint a DPO. Finally, the appointment of a DPO is necessary if an organization processes special categories of data (such as medical data) or personal data relating to criminal convictions and offenses. The Privacy CoOperation can assess whether a DPO needs to be appointed for you.
I am not sure whether privacy is properly implemented within my organization. How can my organization qualify for BC 5701 certification?
The level of maturity in the field of privacy can be determined using a model developed by the Center for Information Security and Privacy (CIP). Certification against BC 5701 is possible from CIP maturity level 3 onwards.
Does obtaining the BC 5701 certificate mean that my organization as a whole can be considered privacy compliant?
The BC 5701 certificate can be issued for a single independent processing of personal data (= the object of certification). All branches of the processing that is eligible for certification, both within and outside your organization, are assessed. Because processing within an organization can only be compliant if a certain system is in place (processes and procedures to properly apply privacy within processing), certification of one processing operation provides a picture of compliance within your organization.
How long does the entire process take (from determining the maturity level to certification by Brand Compliance)?
A maturity level assessment with an appropriate action plan for achieving certification is normally completed within two months. It is difficult to estimate in advance how much time it will take to bring your organization up to the required level. This depends on the size of the organization, its national or international branches, and (unfortunately) also the availability of suitable privacy and information security specialists.
What is the level of expertise of the privacy and information security specialists who will be working for my organization?
The Privacy CoOperation works exclusively with privacy and information security specialists who have at least three years of experience with GDPR implementation programs at various companies. It is also important to note that the specialists have followed training courses tailored to their work. Furthermore, a BC 5701 implementation program is always led and supervised by a BC 5701 implementation professional.

Sign up here for the monthly newsletter
Our newsletter is carefully compiled each month from reports from regulators and developments in case law and legislation. By subscribing, you can stay up to date with all the latest trends.
