A DPO is a data protection officer, the person the GDPR requires some organizations to appoint to oversee compliance and deal with regulators and the public.
Category
Privacy
Also known as
Data Protection Officer
It is mandatory for public bodies and for companies whose core activity is large-scale regular monitoring of people or large-scale processing of sensitive data. Behavioral advertising, loyalty programs, and credit or fraud scoring are on the EU regulators' list of examples. A retailer running a CDP at scale and a bank are therefore usually caught, and national law can add cases. The DPO must be independent and report to top management.
In practice
Bring the DPO in when a campaign or a data flow is being designed, not when it is ready to launch. A DPO who sees the segment logic early can advise on a version that works; one who sees it at launch can only flag the risk. This is a summary of the law, not legal advice.
Related
Something out of date?