Organizations worldwide find themselves in the position of needing to fill a new role, or wondering whether they need to: that of the data protection officer. Under the EU General Data Protection Regulation, a DPO is required for organizations whose core activities involve “regular and systematic monitoring of data subjects on a large scale,” or where the entity conducts large-scale processing of “special categories of personal data.” What does that mean? Check out the IAPP's DPO Toolkit, where you can find everything from tools helping you determine whether your organization needs a DPO to help with setting up the role to following through on the responsibilities that fall under the DPO's purview. It's all right here at the "Full Story" link.
Full Story