Supervisory authority
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
www.ldi.nrw.deResponsible for all private-sector controllers headquartered in Nordrhein-Westfalen. For cross-state groups, the main-establishment principle under Art. 56 GDPR applies.
Datenschutzgesetz Nordrhein-Westfalen (DSG NRW)
Specifies the GDPR and the BDSG for public sector bodies of the State of NRW. Private companies are subject solely to the GDPR and the BDSG; the LDI NRW is the supervisory authority for Düsseldorf, Cologne and all of NRW.
Supervisory practice
LDI NRW regularly imposes fines under Art. 83 GDPR. Focus areas: employee data protection, cookie compliance, international data transfers. Current cases are documented in the annual activity reports.
View activity reportsIndustry clusters on the ground
Düsseldorf is Germany's advertising and fashion capital. Agencies like Grey, Ogilvy and BBDO Düsseldorf shape data-driven marketing privacy, with a focus on cookie compliance, tracking, programmatic advertising and AI-based targeting. Corporations such as Henkel, Vodafone, Metro and Daimler Trucks bring classic corporate DPO requirements (BCR, group policies, joint controllership). The fashion sector (Esprit, Peek & Cloppenburg, C&A) processes extensive customer and employee data, often with international supply chains. In the telecommunications sector (Vodafone headquarters), the TKG and TTDSG supplement the GDPR with specific requirements for traffic data and location data.
How the matching works
We match industry, size and language against our partner network. You get two profiles to choose from, no catalog, no sales discovery.
Describe your setup: industry, headcount, any frameworks (TISAX, ISO 27001, BAFIN). Optional: preferred language.
We check suitable DPOs for Düsseldorf and the surrounding area. Industry fit + capacity + response time. You get two profiles, you decide.
Appointment in writing, notification to the relevant supervisory authority, onboarding directly in the Kopexa platform.
Düsseldorf fees range between 400 EUR and 5,000 EUR per month. Advertising agencies with high tracking volumes and corporate mandates sit at the upper end. Through Kopexa you receive transparent packages for the DPO service. The Kopexa platform license is billed separately.
The LDI NRW is one of the most assertive supervisory authorities in Germany. Focus areas include cookie compliance, international data transfers (the aftermath of Schrems II), employee data protection and AI applications. It regularly carries out on-site inspections at medium-sized companies.
Key areas: the TTDSG (especially § 25 for cookies), DSK guidance on advertising, IAB TCF v2.2 and privacy by design for tracking tools. A DPO for Düsseldorf agencies should be familiar with Adobe Analytics, Google Marketing Platform, Salesforce Marketing Cloud and common DMPs.
Yes. The LDI NRW is the supervisory authority for all of North Rhine-Westphalia, including Düsseldorf, Cologne, Bonn, Aachen and Dortmund. In practice there is no difference in jurisdiction; only the sector focus differs (Düsseldorf: advertising and fashion, Cologne: insurance and media).
We match you with a certified DPO from the Kopexa partner network, with industry expertise for Düsseldorf and the surrounding region. Response within one business day.
Access to certified DPOs with a range of industry specializations.
Kopexa Pro (599 EUR/month): unlimited frameworks, OSCAL support, vendor and asset management, cross-framework mapping, audit & assessments. Not just DPO tooling.
DPO flat rate and platform license shown separately. No hidden tool costs.
More in the hub
Overview: what an external DPO does, when one is mandatory and how the Kopexa partner network places them.
Pricing models for external DPOs compared: hourly fee, monthly flat rate, packages by company size.
Does your company need a DPO? Interactive checker based on Section 38 BDSG and Art. 37 GDPR.
External DPOs by region: Berlin, Munich, Stuttgart, Cologne, Bremen and more.