Yes.
The Information Commisioner says that you may appoint a single data protection officer to act for a group of public authorities or bodies (e.g. GP Practices) taking into account their organisational structure and size.
This is precisely the approach adopted by the ELR GP Fed Data Protection Officer service.
