Recruiting A Data Protection Officer? Seven Practical Considerations

The General Data Protection Regulation ("GDPR") will come into effect on 25 May 2018. It will introduce a number of significant changes for managing data. Central to the operation of the new regime will be the role of the Data Protection Officer ("DPO"). We look at the key considerations for employers who are required to recruit a DPO.

When does an organisation need to appoint a DPO?

An organisation will have to appoint a DPO where its core activities involve processing operations which:

• require regular and systematic monitoring of data subjects on a large scale; or
• require large scale monitoring of special categories of data or data connected to criminal convictions and offences. In addition, all public authorities and bodies must appoint a DPO.