Privacy consultant vs outsourced DPO — the practical difference, when each model fits, cross-border considerations and how to combine both effectively.