Does Your Business Need To Appoint A Data Protection Officer?

The introduction of a formal role of Data Protection Officer ("DPO") is one of the features of the General Data Protection Regulation ("GDPR"). While the concept of a DPO is not new, with many EU member states utilising it in differing ways over the last decade, the GDPR introduces the role as a central pillar of accountability. Under the GDPR it will be mandatory for certain organisations to appoint a DPO, as outlined below. It is worth noting that, while the appointment of a DPO is only mandatory for certain organisations, it is becoming common practice for organisations to designate a DPO on a voluntary basis as a measure to protect the integrity of the organisation's data.

The Requirement