Do You Need A DPO?

To answer that quation it might be useful to look at what a DPO is supposed to do.

It is probably fair to ask, “Do you need a DPO?  Or do you need someone to do the work of a DPO?

Becasue if you don’t have someone doing the jobs listed below, ask yourself, “How are they getting done and are they being done properly?

Essential DPO Tasks

  • To inform and advise the data controller or processor and the employees who carry out processing of their obligations.
  • To monitor compliance with data privacy regulations… including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits.
  • To provide advice about the data protection impact assessment.
  • To cooperate with the supervisory authority.
  • To act as the contact point for the supervisory authority on issues relating to processing and to consult on any other matter.
  • To have due regard for the risk associated with processing operations, taking into account the nature, scope, context and purposes of processing.

The data protection officer shall be designated on the basis of professional qualities and, in particular, expert knowledge of data protection law and practices.