Download our GDPR Kit

http://hubs.ly/H06XByz0

GDPR MINI-WEBINAR SERIES

CYBER MANAGEMENT ALLIANCE’S

Key Facts from Episode 6 – The Data Protection Officer

• Data protection officers are mandatory for all public-sector

organisations, those who conduct large scale data subject
monitoring and those who process large quantities of special
category personal information.

• The DPO serves as the point of contact for data subjects and the
supervisory authority. If you are not required to have a DPO, then
you must still appoint a point of contact in your organisation.

• DPOs can be pooled and do not have to be existing members

of staff.

• DPOs can be designated as a service, for example some providers

including Cyber Management Alliance offer vDPO services.

• DPOs are answerable to the highest levels of management and

the board only.

• The function of a DPO is to advise and monitor adherence to the

GDPR.

• Data controllers and processors must ensure they never prevent a

DPO from conducting their responsibilities as a DPO.

• A DPO and a CISO is not the same thing and they may both exist
in one organisation.

info@cm-alliance.com https://cm-alliance.com +44 203 189 1422 @cm_alliance