External DPO and AI oversight
A DPO who also keeps an eye on your AI, without hiring anyone
An independent data protection officer with fixed hours and a fixed point of contact, who also keeps your AI register and reviews new AI applications.
- How you get a price
- Fixed monthly fee
- matched to your organisation, agreed up front
- Duration
- 12 months, then cancellable per quarter
Who it is for
- Municipalities, schools, healthcare institutions and other public authorities, which must always designate a DPO
- Organisations that process sensitive data or monitor people on a large scale
- Organisations that use AI and want one fixed point of contact for privacy and AI
Not for
- Organisations looking for someone who both designs and reviews privacy: that conflicts with the DPO’s independence
What you get
- Registration as DPO with the Dutch Data Protection Authority
- Advice on DPIAs, data breaches and data subject requests
- Keeping the AI register and reviewing every new AI application or supplier
- An annual plan, quarterly report and annual report for the board
- Fixed hours per month and a fixed point of contact
How it works
- 01
A 30-minute call
You explain where you stand. I tell you honestly whether and how I can help.
- 02
Proposal within three working days
Fixed scope, fixed price and a schedule, within three working days. No open end.
- 03
Delivery, signed
You receive the deliverable with my name under it, and thirty days for follow-up questions.
Who you engage
Zahed Ashkara is a legal counsel and freelance AI and privacy consultant, with assignments at Rabobank, Sanoma, drinking water utility PWN, central government and municipalities. Certified AI Compliance Officer and member of the NEN AI & Big Data standards committee.
Frequently asked questions
Do we need a DPO?
A public authority always. Another organisation if its core activity consists of large-scale, systematic monitoring of people or large-scale processing of special category or criminal data (Article 37 GDPR). The decision tree at Article 37 helps you decide.
What does the AI oversight involve?
The AI Act has no mandatory officer like the DPO. You do need to know which AI you use, what your role is and which obligations come with it. I keep the register, review every new application and report every quarter.
What does it cost?
A fixed monthly fee, depending on the size of your organisation and the number of hours. After a 30-minute call you receive a proposal within three working days, with the fee that applies for the whole term.
The other two offerings
First, a 30-minute call
You explain where you stand. I tell you honestly whether and how I can help.
Book a 30-minute call