The evaluation of the cost of an external data protection officer requires special attention in order to control your budget and thereby the success of the compliance project in the medium term. It is common to use flat rates for certain functions or tasks that are reasonably foreseeable in terms of complexity. Flat rates can be supplemented by time-spent pricing for mission elements whose workload is difficult to predict. Regarding the packages, be sure to clearly define the services included without being satisfied with general formulas, it is thus preferable to provide a list of deliverables. We also recommend setting a limit for each service offered as part of a package.