WHaT Is IT?
A DPO is the person responsible for an organisation’s data protection obligations. They must monitor internal compliance and act as the main point of contact for the relevant governing body. In the case of the UK, that would be the ICO. They have many responsibilities, including:
ICO registration, data breach support and response, Subject Access Request (SAR) support, support and advice on policies and procedures, IT security awareness training & more.
They must also give advice on Data Protection Impact Assessments.

WHO NEEDS ONE?
Any organisation that is a public authority or body, or that processes sensitive data on a large scale:
Racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, genetic data, biometric data, health-related data, data on sex life or sexual orientation.
Even if the above does not apply for an organisation, the ICO recommends appointing one to comply with the GDPR and to manage data protection.

FURTHER READING
Each week, we publish articles about all things cyber security-related. You can access it all via our blog section but use the links below to jump straight into some key articles on data protection officers:
– Data Protection Officer FAQs (and answers)
– Do I need a DPO (Data Protection Officer)?
– Do I need a UK Data Protection representative after Brexit?
We’d love to hear your thoughts on these so do please leave them in the comments section at the foot of the page.

CRIBB CAN HELP YOU WITH:
uK & EU DATA PROTECTION OFFICER SERVICES | WORLDWIDE DATA PROTECTIOn GUIDANCE
CRIBB Cyber Security adopts a Security by Design approach in everything we do. Nowadays, it pays to be proactive and we highly recommend that you do the same. By now you should be aware of whether or not you require a data protection officer. If you do and you do not have one, let us help. We’ll help you achieve compliance and ensure that your IT Security infrastructure is as robust as possible. Get in touch today to find out more and to raise your cyber awareness.