The personal data protection officer is the person who, in a given organisation, is to deal with a given entrepreneur with one websites advising on personal data protection rules and with second - monitoring the personal data controller’s activities in this respect.
The criterion for the selection of the data protection officer shall be his professional qualifications, in particular his expertise in data protection law and practice, and his ability to carry out statutory tasks.
- inform and advise the controller, processor and employees who process personal data about their obligations under the GDPR and other provisions of the Union or Member States on data protection,
- monitoring compliance with the GDPR, other provisions of the Union or the Member States on data protection and the policies of the data controller or processor in the field of personal data protection, including sharing of responsibilities, awareness raising activities, training of personnel participating in processing operations and related audits,
- to make recommendations to the impact assessment and to monitor its implementation, on request, where the data controller is required to carry out an assessment of the impact of the planned processing operations on data protection,
- cooperation with the supervisory authority,
- acting as a contact point for the supervisory authority on processing matters, including prior consultation, where the processing impact assessment would pose a major risk to the data subject if the controller had not taken measures to minimise that risk and, where appropriate, to consult on all other matters.