When Is Outsourced DPO Appropriate?