Setting up a Group DPO with DPO Relays sometimes gives rise to reluctance, particularly when an organization has been operating without relays for years.
When we talk to data controllers or general management, one question often comes up: “Why integrate DPO relays, when the current model seems to work?”.
This is a legitimate question. However, the benefits of a Group DPO supported by relays quickly become apparent. We had the case of a traditional company that thought it had everything under control. Until the day when operational non-compliance, due to a lack of coordination, cost them dearly, both in turnover and reputation. This could have been avoided with a decentralized but coordinated GDPR governance model.
You have also noticed that the regulatory environment is increasingly demanding (GDPR, NIS2, IA ACT, DSA, DMA, draft directive on liability in AI, etc.).
A Group DPO supported by DPO Relays makes it possible to better respond to these challenges. How? By relying on a structure that combines strategic centralization and local action.