External DPO service providers, whilst offering valuable benefits to the organisation, are not a one stop shop for privacy and data protection compliance. Companies must still maintain robust data protection policies, promote good data protection practices and generally uphold the data protection principles.