Can the DPO be an existing employee?
Yes, as long as the professional duties of the employee are compatible with the duties of the DPO and do not lead to a conflict of interests, rather than you having to create a new post
Can we contract out the role of the DPO?
Consent – Article 6, 7, 8
Control of private data is now clearly vested in the individual – with very few statutory exceptions
Data Subject Rights Articles 13, 14, 15
Do we know EXACTLY what and where all ‘Processing’ is / is taking place?
External Controller
Privacy by design and default
Profiling Articles 21, 22, 23
Responsibility of the controller – Data protection by design and by default
The General Data Privacy Regulation – (EU) 2016/679 of the European Parliament and of the Council