DPO-as-a-Service
Your Outsourced Data Protection Officer.
Full, granular ownership of your data protection compliance, across every jurisdiction we operate in. A standing appointment, not a template pack.
- Countries covered
- 24Countries covered
- Regional hubs
- 2Regional hubs
- Months to full operation
- 2–3Months to full operation
- Accountable DPO
- 1Accountable DPO
Our core offering
A Standing Appointment, Not a Template Pack.
Most clients engage us for one reason: they need a Data Protection Officer, and they need that function to be genuinely outsourced. We hold the mandate, sign off the framework and chase down the detail.
You bring
Access, context and cooperation.
We bring
The judgment, the documentation, the regulator relationship and the follow-through.
Together
One accountable DPO. No internal privacy function needed.
Once appointed, we are accountable for working out what “good” data protection looks like for you: mapping obligations, building the record, engaging the regulator and running point on every downstream decision.
Who it is for
Organisations That Handle Personal Data, Without a Full-Time Privacy Team.
Many organisations process personal data as a normal part of doing business, but do not have, and often do not want, an in-house privacy function. We work with them in one African jurisdiction or many.
- NGOs and development programmes
- Financial services
- Healthcare
- Telecommunications
- Technology platforms
- Public-interest institutions
Scope of the outsourced DPO function
What We Take Ownership Of.
Deliberately granular: the actual ground we cover on your behalf once appointed.
Governance & accountability
- Formal DPO appointment and mandate, where permitted by law
- Primary point of contact for supervisory authorities
- Executive and board-level reporting
- Accountability structure, with evidence it is followed
Getting started
Operational in Two to Three Months.
Most engagements move from signed mandate to a fully operational DPO function in two to three months. The retainer begins from day one.
Month 1
Discovery & scoping
- Scope every active country
- Interview stakeholders and inventory your data
- Gap analysis against existing records
- Formal DPO appointment and mandate sign-off
Month 2
Foundation build
- Core policy suite drafted and finalised
- Baseline Record of Processing Activities
- Outstanding registrations and filings
- Reporting cadence and escalation channels
Month 3
Go-live & handover
- DPO becomes the regulators' point of contact
- First DPIAs for high-risk processing
- Staff awareness briefing delivered
- First executive and board report
- Move to the standing monthly retainer
Timelines vary with the number of jurisdictions and the state of existing documentation.
Where we operate
Two Hubs. Twenty-Four Countries.
Each hub is based in its home country and extends coverage across the surrounding region through active regional presence or coordinated delivery.
Kenya Hub
East, Central & Southern Africa
Kenya
Uganda
Rwanda
Tanzania
Zambia
Malawi
Ethiopia
Somalia
South Africa
Botswana
Namibia
Zimbabwe
Nigeria
Ghana
Benin
Senegal
Côte d'Ivoire
Burkina Faso
Mali
Gabon
Morocco
Tunisia
Algeria
EgyptOutside both hubs? New countries are scoped on a coordinated-delivery basis during onboarding.
Monthly retainer
One Monthly Retainer, Scaled to Where You Operate.
Your retainer is based on the countries you need covered. The more you add, the lower the rate per country, so broad coverage stays predictable.
- Included: the ongoing DPO function across your active countries.
- Scoped separately: audits, training programmes and standalone AI governance projects.
- At cost: statutory fees paid to national authorities.
Rate per country
Monthly retainer = the sum of the per-country rates
Tell us where you operate and we will return an indicative monthly figure.
Get my indicative monthly quoteNo commitment. Final pricing is confirmed at scoping.
Your indicative monthly quote
Tell Us Where You Operate.
A short scoping conversation is all it takes to turn your footprint into a monthly figure.
- 1You send your detailsYour organisation and the countries you operate in.
- 2We scope it togetherA short jurisdictional conversation counts your active countries.
- 3You receive an indicative monthly quotePriced per country, with project work scoped separately.
Good to know
Questions, Answered.
Do we need an internal privacy team?
No. You supply access, context and cooperation. We supply the judgment, the documentation, the regulator relationship and the follow-through, end to end.
How long until it is fully operational?
Most engagements move from signed mandate to a fully operational DPO function in two to three months. Timelines vary with the number of jurisdictions and the state of existing documentation. The retainer begins from day one.
What is not included in the retainer?
Audits, training programmes and standalone AI governance projects are scoped separately. Statutory fees paid to national authorities are charged at cost.
What if we operate outside your 24 countries?
New countries are scoped on a coordinated-delivery basis during onboarding.
Where does hlola fit?
The hlola platform is an optional, separate governance and privacy enablement tool. It complements the DPO function and does not replace it.
Get in touch
Let's Scope Your Engagement.
Every engagement starts with a short jurisdictional scoping conversation. We count your active countries, apply the rate scale and return an indicative quote.
Nairobi · East, Central & Southern Africa
2nd Floor 90 JGO, James Gichuru Road, Lavington, P.O Box 40583-00100 Nairobi
dpo360@lawyeringafrica.com+254735360360
Nigeria · West & Northern Africa
39a Tai Solarin Ave, Gwarinpa, Abuja 900108, Federal Capital Territory
dpo360.ng@lawyeringafrica.com+234 7901 569 623
All enquiries are handled with discretion. Initial discussions are exploratory and non-binding. Formal advice, statutory roles or regulatory representation are provided only under written engagement.