Article 37(7) of the new EU General Data Protection Regulation requires that “the controller or the processor shall publish the contact details of the data protection officer and communicate them to the supervisory authority.” But how does one go about communicating this information to the relevant authority? Is there a formal process, or can companies simply send an email with a DPO’s name, phone number and email address? As it turns out, different jurisdictions have settled on different notification mechanisms. The IAPP Resource Center has a list of each country’s requested DPO notification process.
 (IAPP member login required.)
Full Story