GDPR Update: DPO Now Included In Romanian Classification Of Occupations

According to the GDPR "the data protection officer may be a staff member of the controller or processor, or fulfil the tasks on the basis of a service contract"¹. In other words, companies may choose to appoint an internal DPO, who is already a member of the company's staff, or an external DPO (e.g. lawyers, data privacy specialists).

Particularly the possibility to appoint an existing employee as DPO has led to numerous discussions and debates in the business field on the necessity of including the DPO occupation in the Romanian COR or not.

Although there were voices against the above proposal, the majority of interested persons found this approach to be both necessary and welcome, not only for data privacy purposes, but mainly from an employment law perspective.