Organisational alignment of the Data Protection Officer

In this article we aim to explain the main responsibilities of the DPO, a role which has been heavily extended in comparison to existing local legislation (such as the German Federal Data Protection Act, Article 4f of German law) and outline some principles of organisational setup. We also discuss the relationship of the DPO with other areas such as Information Security (InfoSec) and discuss pros and cons of allocation within the organisation’s hierarchy using examples from the market. Finally we give our recommendation while taking GDPR requirements and practical experience into account.

Read the full article at zeb BankingHub