Brazil's Special Secretariat for Debureaucratization, Management and Digital Government issued instructions for appointing data protection officers under the General Data Protection Law. Under the privacy law, DPOs must have multidisciplinary knowledge in the areas of privacy, data protection and data governance; must not be located within an organization's IT team; and be appointed within 30 days of the publication of the instructions. Editor's note: IAPP Westin Research Fellow Sarah Rippy analyzed the operational impact of DPOs under the LGPD here.
Full Story