Looking for a DPO for your school or town hall?
Many schools and town halls discover this obligation without knowing where to start. GET Conseil helps you appoint your DPO and implement your information security policy — the practical security of your information system.
A little-known obligation
The DPO: an obligation many discover too late
A legal obligation
Article 37 of the GDPR requires every public authority or body — including state schools and town halls — to appoint a Data Protection Officer (DPO).Often discovered too late
School management or town hall staff often end up searching "DPO" online without knowing exactly what the role covers, or where to start.A real risk if inspected
Not having an appointed DPO is a GDPR breach, which exposes the organisation to a possible CNIL sanction in the event of an inspection or complaint.Our support
DPO and information security, hand in hand
GET Conseil does not act as your DPO: we help you understand this obligation and appoint the right person or structure (in-house, shared between several towns, or outsourced). At the same time, we handle the technical side: implementing your information security policy, without which appointing a DPO remains largely symbolic.
We take stock
Has a DPO already been appointed? What data processing already exists (pupil records, resident data, video protection)? Where does information system security currently stand?We help you appoint a DPO
In-house, shared between several towns, or outsourced: we guide you towards the solution suited to the size and resources of your organisation.We implement the information security policy
Securing the information system, access management, backups, incident procedures, staff awareness — the concrete technical foundation of your compliance.What is an information security policy?
An Information System Security Policy (ISSP) is the framework document that sets out the rules and responsibilities for protecting an organisation's data and IT system: who has access to what, how backups are managed, how to react to an incident (failure, cyberattack, data loss), and how to raise staff awareness of good practice.It is the practical counterpart to Article 32 of the GDPR, which requires "appropriate technical and organisational measures" to secure personal data. Without a genuinely applied security policy, an appointed DPO cannot guarantee real compliance — this is the part GET Conseil handles.
This work ties directly into our cybersecurity offer: protecting workstations, the network, and responding to incidents.
Frequently asked questions
What our clients ask us
Is my school or town hall required to have a DPO?
Yes. Article 37 of the GDPR requires every public authority or body — including state schools and town halls — to appoint a Data Protection Officer.Is GET Conseil my DPO?
No. We help you understand this obligation and appoint a DPO suited to your structure (in-house, shared or outsourced). We handle implementing your information security policy, the technical side of your IT security.What is an information security policy?
It sets out the concrete rules for protecting your IT system: access, backups, incident procedures, staff awareness. It is the technical counterpart to the GDPR's security obligation.What does an organisation without an appointed DPO risk?
A GDPR breach, which exposes it to a possible CNIL sanction in the event of an inspection or complaint.Do you work with groups of towns sharing resources?
Yes, we support single organisations as well as groups of towns wishing to share a DPO and their IT security.Service area
Where we operate
GET Conseil is based in Roubaix and operates across the whole region: Lille metropolitan area (Lille, Roubaix, Tourcoing, Villeneuve-d'Ascq, Wattrelos, Marcq-en-Barœul), inland Flanders (Armentières, Bailleul, Hazebrouck), Dunkirk area (Dunkirk, Grande-Synthe), Douai & Valenciennes areas (Douai, Valenciennes, Denain), Cambrésis (Cambrai), Artois & the former mining basin (Arras, Lens, Béthune, Liévin, Hénin-Beaumont), Opal Coast (Calais, Boulogne-sur-Mer, Saint-Omer), Hainaut (Maubeuge), as well as the Somme, Oise and Aisne départements (Amiens, Beauvais, Compiègne, Saint-Quentin).