DPO as a service avoids conflicts of interest