Many people don't know when a data protection officer needs to be appointed in a company. This obligation exists in various cases.
When a data protection officer must be appointed: This is what you should know
A so-called “data protection officer” is a person who represents an expert in data protection. Data protection officers ensure that the requirements of the GDPR are adhered to and implemented in a company. This should prevent violations of data protection and other data protection regulations.
- A data protection officer or a data protection officer must mandatory a certain number of employees in a company. Are in a company at least 20 employees If you are involved in the automated processing of personal data, a data protection officer must be hired for the company.
- In many companies, the number of employees is therefore crucial. However, this group of people includes not only employees and employers, but also interns, freelancers and various part-time workers.
- In addition, a data protection officer must also be appointed in other cases. For example, if the core activity of a company is the processing of special personal data, such a person must be hired.
- In addition, a data protection officer must also be employed if particularly risky processing of personal data is carried out. Regardless of the number of employees, a data protection officer must then be appointed.
- Especially in companies where, for example, health data is processed, a data protection officer must always be employed. But data protection officers must also be appointed in authorities, regardless of the number of employees, if, for example, data from video surveillance is being processed.