Ad hoc services
Ad hoc services are one-off, clearly scoped data protection engagements delivered for a specific need, as opposed to a recurring mandate such as an outsourced Data Protection Officer or Data Protection Representative.
Typical ad hoc engagements in life sciences include a DPIA for a new clinical trial or platform, a gap analysis before a financing round or acquisition, the review of an informed consent form or clinical trial agreement, a transfer impact assessment for a new vendor, or a due diligence audit of a target company.
Ad hoc work is usually priced on a fixed-fee or time-and-materials basis and delivers a defined output (report, redlined document, register). It is the right model when the need is bounded; where processing is ongoing, high-risk or large-scale, Art. 37 GDPR may in any case require a permanent DPO. See iliomad's compliance services.
An ad hoc engagement fits a defined task with a clear deliverable, such as reviewing a notice or assessing a particular data flow. Agree the scope, inputs, exclusions and handover before work starts. It does not replace an ongoing role or duty that applies to the organisation, including a required DPO appointment.
