As of 13 August 2026, AI can only partly find a UK data protection officer.

What to actually do

1. Hand it to a person

   The route this page recommends

   Someone with a licence or accountable authority has to sign this before it counts.

2. Use a tool built for this

   Second choice

3. Do it yourself

   The distant third

   A chat interface, chat-fluent skill, and roughly 30 minutes until you can act on the result.

   How to actually do it

   1. Open a document containing your organisation's size, sectors, processing activities, special-category or criminal-offence data, locations, reporting lines, required availability and budget.
   2. Search for current UK DPO candidates or specialist providers using reputable professional directories, recruitment sources and candidate referrals, then save the candidate profiles, websites and contact details you intend to consider.
   3. Paste the organisation details and the saved candidate information into a chatbot with the prompt, asking it to separate verified facts, candidate claims and missing information.
   4. Send the resulting role brief to each shortlisted candidate and ask them to confirm their DPO experience, availability, reporting arrangements, independence and any conflicts of interest in writing.
   5. Check each candidate's qualifications, employment history and references directly with the issuing body, previous client or employer, and compare those checks with the chatbot's table.
   6. Ask a UK solicitor or specialist data protection adviser to review any difficult question about whether the proposed person is suitable, independent or properly appointed, then interview the verified shortlist and record the appointment decision.

   Prompt

   Help me find and assess a UK data protection officer for [organisation name or type].
   
   Our organisation is based in [UK location] and has approximately [number or range] staff. We process [categories of personal data] for [main purposes]. Our main sectors, customers and suppliers are [details]. We need a DPO who can work [in-house or externally], for approximately [availability], with an approximate budget of [budget if known]. The role must cover [specific duties or risks].
   
   Create:
   1. A concise DPO role brief that separates legal or regulatory requirements from preferences.
   2. A list of suitable places to search for candidates, without inventing providers, vacancies, qualifications or contact details.
   3. A candidate comparison table using only the candidate information I provide or clearly identified public sources. Include relevant UK GDPR experience, sector experience, independence or conflicts, availability, location, qualifications or training, references needed, and information gaps.
   4. Ten interview questions that test practical DPO competence rather than generic knowledge.
   5. A verification checklist covering identity, qualifications, references, conflicts of interest, insurance or contractual arrangements where relevant, availability and how the person will report to senior management.
   6. A short list of issues that require advice from a UK solicitor or specialist data protection adviser.
   
   Do not claim that any candidate is suitable without evidence. Do not invent current vacancies, prices, credentials, legal requirements or contact details. Do not make the appointment decision for me. State clearly where the information is missing or needs independent checking. This is not professional advice.

   Open it prefilled in ChatGPT or Claude, or copy it into Gemini, which takes no prefill link.