Data protection officer (DPO)

Catalog reference

Appoint a DPO if you're a public authority, your core activities involve large-scale regular and systematic monitoring, or large-scale special-category/criminal-offence data processing. The DPO must be given the resources and independence to advise on and monitor compliance, be a contact point for people and the supervisory authority, and report to the highest level of management. Decide this in only if one of the appointment triggers applies to you.

Narrative — how we satisfy this requirement