
Cyber Security Services
eco External Data Protection Officer service
Our “eco External Data Protection Officer” service is specifically designed to offer small and medium-sized member companies support from eco’s experts in data protection. Our aim is to help companies continuously adapt their business processes to ever-changing data protection requirements. This includes, among other things, assistance with the introduction of new processing procedures and the organisation of workshops to sensitise employees to data protection issues.
Advantages of an external data protection officer
Companies from the telecommunications and Internet industry are a particular focus of data protection authorities, as data processing for these companies is associated with great risks. A number of member companies have therefore decided to avail of the eco External Data Protection Officer service. This not only allows them to conserve internal resources and avoid potential conflicts of interest but also to outsource the existing liability risk.
Data protection is continuously evolving
In 2024, eco’s data protection experts continued to support subscribers to the service in adapting to significant developments in data protection. A key issue was the growing importance of artificial intelligence and the associated data protection challenges. In particular, the new EU AI Regulation, which came into force at the end of 2024, brought new requirements for companies. It lays down strict rules for relevant systems to ensure the safe use of AI. The handling of personal data processed by AI systems is now also subject to stricter regulations. Companies must therefore revise their internal processes to avoid legal risks. eco’s External Data Protection Officers provided support in evaluating AI systems to ensure their compliance with data protection requirements.

Data protection law is continuously evolving. In 2024, the European Court of Justice (ECJ) shaped the legal landscape with landmark rulings that made it easier for consumers and competitors to take legal action. Consumer protection associations will now be able to take legal action against data protection violations even without an individual mandate. In addition, competitors will be able to challenge violations under competition law, provided that national regulations allow this. In the area of GDPR damages, the ECJ ruled that the mere loss of control over personal data can be sufficient grounds for compensation. These developments strengthen GDPR case law and are likely to lead to an increase in lawsuits. Last year, eco’s External Data Protection Officers helped subscribers keep track of the multitude of legal changes.
Overall, 2024 was marked by numerous significant developments and decisions in data protection. Companies had to adapt and optimise their data protection measures. The eco External Data Protection Officers were available to advise service subscribers at all times.
eco External Data Protection Officer service
The eco Data Protection Officers are qualified data protection experts with many years of experience in the telecommunications and Internet industry.
In the coming year, eco will continue to support the service’s customers with regard to further upcoming new regulations and any questions on the topic of data protection. If member companies have decided to cover the topic of data protection in-house, these members can book workshops and audits via the eco External Data Protection Officer Service. In this way, eco helps to make companies even more aware of the relevance and importance of data protection.
The service is offered in co-operation with Rickert Rechtsanwaltsgesellschaft mbH and dp.institute Data Protection Consulting GmbH.
Further information is available at: international.eco.de/eco-services/external-data-protection-officer