With the passage by the EU Parliament of the General Data Protection Regulation, a five-year process has come to a close and organizations across the Continent are now preparing for a number of new requirements for data collection and processing. One requirement in particular relates to staffing, something not before seen in European law outside of Germany: Certain organizations will now have to hire, appoint, or contract a data protection officer. The IAPP has undertaken research to determine what the number of DPOs required under the GDPR will be, at the least, 28,000. This article for The Privacy Advisor by IAPP Research Director Rita Heimes, CIPP/US, and IAPP Publications Director Sam Pfeifle details the methodology.
Full Story