According to Hunton Andrews Kurth's Privacy & Information Security Law Blog, the Belgium Data Protection Authority issued a 50,000 euro fine for a failure to adhere to data protection officer requirements under the EU General Data Protection Regulation. Following an investigation into a data breach, the DPA found a company had appointed its head of the compliance, risk management and audit department as DPO. The dual appointment left the DPO with a potential conflict of interest, which violates Article 38(6) of the GDPR.
Full Story