Shared DPO for Public Bodies

Who it is for

• associations of municipalities and inter-municipal bodies: that wish to organise the service for their members;

• regional and provincial authorities: that support smaller municipalities in their area;

• municipalities and their entities: municipal companies, agencies and foundations;

• groups of agencies: bodies within the same ministry or department.

How it works

1. joint assessment: an inventory of each body's processing and of the risks they share;

2. conflict-of-interest review: a prior check for each body served;

3. designation by each body: a separate designation act, publication and notification;

4. common model, local application: shared policies and templates, adapted to each body;

5. reporting: an annual report for each body and a consolidated view for the coordinating entity.

Benefits

• economies of scale: shared costs and fees proportionate to each body;

• consistency: the same rules and templates across all bodies;

• joint training: common sessions for elected officials and staff;

• coordinated response: joint handling of breaches affecting shared systems or suppliers.

Plans

• Shared base: the statutory DPO tasks for each body, common templates and annual reports;

• Shared advanced: adds impact assessments, joint training and support with personal data breaches.

Fees are set in a tailored proposal, with a common component and a component per body.

National offers: Portugal · Spain · Brazil

Other offers: Public bodies · Private organisations · Corporate groups · European Union

General information as at October 2026; it does not constitute legal advice.