The Privacy CoOperation works exclusively with DPOs who have at least five years of experience in advising and supervising with regard to the GDPR. The Privacy CoOperation offers the appointed DPO a network of other DPOs, so that he or she can draw on a broad pool of knowledge and experience when necessary. This ensures that your organization receives the best possible support.

The Privacy CoOperation offers the option of a ‘DPO as an e-service.’ You can appoint a DPO for the period you need to structurally fill the position (again).

In certain cases, an organization is required to appoint a DPO. For example, government agencies are required to appoint a DPO. Organizations that process data in a manner that, due to its nature, scope, and/or purpose, requires regular and systematic observation of data subjects on a large scale are also required to appoint a DPO. Finally, the appointment of a DPO is necessary if an organization processes special categories of data (such as medical data) or personal data relating to criminal convictions and offenses. The Privacy CoOperation can assess whether a DPO needs to be appointed for you.

The level of maturity in the field of privacy can be determined using a model developed by the Center for Information Security and Privacy (CIP). Certification against BC 5701 is possible from CIP maturity level 3 onwards.

The BC 5701 certificate can be issued for a single independent processing of personal data (= the object of certification). All branches of the processing that is eligible for certification, both within and outside your organization, are assessed. Because processing within an organization can only be compliant if a certain system is in place (processes and procedures to properly apply privacy within processing), certification of one processing operation provides a picture of compliance within your organization.

A maturity level assessment with an appropriate action plan for achieving certification is normally completed within two months. It is difficult to estimate in advance how much time it will take to bring your organization up to the required level. This depends on the size of the organization, its national or international branches, and (unfortunately) also the availability of suitable privacy and information security specialists.

The Privacy CoOperation works exclusively with privacy and information security specialists who have at least three years of experience with GDPR implementation programs at various companies. It is also important to note that the specialists have followed training courses tailored to their work. Furthermore, a BC 5701 implementation program is always led and supervised by a BC 5701 implementation professional.