What is a data protection officer?
According to the Data Protection Regulation, some organizations and companies are obliged to appoint a so-called data protection officer.
The data protection officer is intended to assist companies in carrying out internal controls, inform and advise on the privacy legislation, provide advice in carrying out a data protection impact assessments, etc.
The data protection officer is also intended to be a contact person with individuals and the Data Protection Authority.
The data protection officer must be independent, an expert in the data protection legislation, have adequate facilities and manpower and have direct access to senior management. A data protection officer can be either an employee or an external expert.