FORMAL ANSWER

A data protection officer is a person designated by the controller, among other tasks, to inform and advise the controller and its employees of their obligations under data protection provisions, monitor compliance with those provisions, provide advice on data protection impact assessments, monitor their performance, and act as a contact point for the supervisory authority.

PRACTICAL ANSWER

The data protection officer is the most important person in an organisation when it comes to personal data. They inform, advise and train the controller and its employees, conduct audits and continuously assess the organisation’s GDPR compliance, indicating areas for improvement. When needed, they are the contact point — both for the Polish DPA and for the data subjects whose data the controller processes.

MORE

• We offer DPO outsourcing, i.e. taking over the data protection officer function