Data Protection Officers (DPOs)
The contact details of a DPO are public
Organisations must publish their DPO's contact details and share them with the supervisory authority, so people and regulators always know who to contact.
Data Protection Officers (DPOs)
Three triggers force a mandatory DPO
You must appoint a DPO if you're a public authority, if your core activity involves large-scale systematic monitoring, or if it involves large-scale processing of sensitive data - hitting just one trigger is enough.
Data Protection Officers (DPOs)
A DPO answers to the top, not middle managers
A Data Protection Officer must report directly to the highest level of management, not to a department head or line manager, to keep their advice independent.
Data Protection Officers (DPOs)
A DPO cannot be fired for doing their duty.
GDPR protects Data Protection Officers from being dismissed or penalised for properly carrying out their duties.