New: a ready-to-use data breach response checklist.New: data breach response checklist.Download the checklist
For DPOsXLSX and ODS

Multi-client DPO Kit

For anyone who is the DPO of several organisations: clients, capacity, yearly calendar, deadlines and evidence for all of them in one file, with the same method for every client.

  • Clients tiered by risk, with the monitoring hours each one needs
  • A yearly calendar and a deadline list with every client in one view
  • An evidence log to record each piece of advice and the client’s decision
Reviewed
23 Oct 2026
Legal basis
GDPR Art. 37 to 39
Size
201 KB (XLSX) · 156 KB (ODS)

Download the kit

Enter your email and download both versions straight away, Excel and LibreOffice.

Helps us choose the next resources.

See how we handle your data in the privacy policy.

What’s inside

Seven sheets, every client in view.

Sheet 1Start hereHow to set up the file for your client portfolio.
Sheet 2ClientsEach client with its risk tier and the monitoring it needs.
Sheet 3CapacityThe hours a month your portfolio needs, compared with the hours you have.
Sheet 4CalendarThe year’s tasks for each client, month by month.
Sheet 5DeadlinesBreaches, requests and reports with a due date, across all clients.
Sheet 6EvidenceEach piece of advice, the client’s decision and where the proof is.
Sheet 7SettingsRisk tiers and list values, which you can adjust.
ClientsCapacityCalendarDeadlinesEvidence
ClientSectorCountryExample?Lead in your teamEngagement letter signed
Clínica Sorriso (example)HealthcarePortugalYesInêsYes
Coop. Vale Verde (example)AgriculturePortugalYesInêsYes
Lar Bem-Estar (example)Social carePortugalYesInêsYes
Preview of the "Clients" sheet. The example clients are fictional.

Frequently asked questions

Do I have to give my email?

Yes. It helps us understand who uses the resources. We don’t ask for your name or company, and the newsletter only starts if you tick the box.

Can I use the kit with my clients?

You can use it in your organisation and in work for clients. You just can’t resell it as a product.

Does it replace legal advice?

No. The kit follows the GDPR and the guidance of the CNPD (Portugal’s data protection authority) and the EDPB, but each organisation has to confirm what applies to its own case.

Guide · 12 minExternal DPO with several clients: how to manage GDPR for all of themThe method that goes with this kit, with Inês’s week and her fourteen clients.Read the guide