Data Protection Officer as a Service

The Force is legislatively required to have a Data Protection Officer.

We require data protection support for thirty days on an as needed til Feb 2026. As this is a demand-led role, it would be beneficial if the company offered a contract where only worked hours are billed for, rather than a flat daily rate that is charged regardless of the amount of work undertaken. The consultant will need a minimum of NPPV3 vetting, and SC vetting clearance would be preferable to cover all eventualities. We also require security certification at both ISO 27001 and Cyber Essentials Plus levels, and staff security clearance must conform to BS7858:2019. Previous experience of providing data protection support to a police force is essential, due to the specific requirements of data protection legislation in relation to law enforcement.