GAID 2025 Unpacked (Series II): Data Protection Officers, Mandatory Consents And Emerging Technologies

Introduction

In continuation of our GAID 2025 Series which examined the General Application and Implementation Directive (GAID)'s expanded compliance obligations, individual responsibilities, and risk-based classification framework – GAID 2025 Unpacked: Critical Updates on Data Processing, Individual Obligations, and Compliance Measures, this second instalment focuses on three equally significant themes: (a) the enhanced role and responsibilities of Data Protection Officers (DPOs); (b) the broadened scope of mandatory consent requirement for specific processing activities; and (c) the compliance expectations for organisations deploying emerging technologies such as Artificial Intelligence (AI), the Internet of Things (IoT), and Blockchain for the purpose of processing personal data. Together, these provisions signal a maturing regulatory environment where data governance is more structured, risk sensitive and accountability driven.