Skip to content

info@crci.co.zw

Data protection officer services

A data protection officer your organisation can rely on

Whether you need a named DPO on retainer or a project to build your data protection programme from the ground up, CRCI brings practitioner experience in risk, compliance and security.

DPO as a service

Outsourced DPO

A named data protection officer who acts as your privacy point of contact, on a retainer.

  • Named DPO and regular compliance reviews
  • Support with data subject requests
  • Coordination of breach response and notifications
  • Staff awareness sessions each year
  • Liaison with the data protection authority
  • Quarterly report to leadership or the board

Advisory and consultancy

DPO advisory project

A fixed-scope project that builds or strengthens your data protection programme.

  • Personal data inventory and mapping
  • Gap assessment against the Act
  • Privacy notices, consent wording and retention schedules
  • Data processing agreements with suppliers
  • Data protection impact assessments (DPIAs)
  • Incident response plan and staff training

How it works

  1. Step 1

    Discovery call

    We confirm what personal data you handle and whether a DPO is required for your activities.

  2. Step 2

    Gap assessment

    A review of your current practices against the Cyber and Data Protection Act [Chapter 12:07].

  3. Step 3

    Remediation plan

    A prioritised plan with owners, dates and the documents to produce.

  4. Step 4

    Ongoing support

    Retainer support as a DPO, or a handover to your team with training.

Do we need a DPO?

That depends on the Act and on what your organisation does with personal data. We confirm this during the discovery call, so you don't have to guess.

Registration

Registration with the data protection authority is part of compliance. We help you prepare the application and the supporting records.

Fees on request

Retainer and project fees depend on the size and complexity of your data processing. We give a written quote after the discovery call.

Request a DPO assessment

Our DPO services are structured to avoid conflicts of interest with other roles in your organisation. Confirm the scope and terms in writing before engagement.