GDPR and the role of the Data Protection Officer

The GDPR, which is due to come into effect on 25 May 2018, will make it mandatory for certain organisations to designate a data protection officer ('DPO')[1]. These are controllers and processors of personal data that are -\r

\r

• public authorities and bodies (except certain courts);
\r

• organisations whose core activities consist of regular and systematic monitoring of data subjects on a large scale; and
\r

• organisations whose core activities consist of processing special categories of data on a large scale.
\r