The U.K. Information Commissioner’s Office released a resource organizations can follow on data protection officers ahead of the EU General Data Protection Regulation. The resource has a checklist on appointing a DPO, where the DPO is positioned within an organization, and the tasks DPOs may perform within an enterprise. The ICO also lists out the requirements for whether a company needs to appoint a DPO, the definition of a public authority, the professional qualifications a DPO should have, whether organizations can share DPOs, and advice companies can follow to best support the person in the position.
Full Story