Data Protection Officer And Conflicts Of Interests

Data protection officer (DPO) monitors an organization's compliance with data protection requirements. DPO is a statutory position regulated in the EU's General Data Protection Regulation (GDPR). The position is thus set in law similarly to such positions as the CEO, which is regulated by the applicable Limited Liability Companies Act.

In practice, the DPO monitors organisation's compliance with data protection rules, points out possible deficiencies as well as informs and advices the management and the employees on data protection matters.

Pursuant to the GDPR, a person acting as a DPO must have sufficient data protection expertise to perform the task and be free of any conflicts of interest in relation to their duties.