External Data Protection Officer (DPO)

In addition to a clearly defined strategy, the appointment of a Data Protection Officer (DPO), which the GDPR imposes on all public authorities, companies, and institutions involved in the systematic and regular processing of personal data or the processing of sensitive personal data), is another key element in facilitating the compliance of personal data protection.

If your company does not have the relevant legal expertise, or the required knowledge and experience in the field of information security, or if your employees are overwhelmed with their other obligations, you can appoint an external DPO, who will act in an independent capacity to ensure that your company’s personal data processing and protection complies with the rapplicable regulations.

According to the GDPR, DPOs may not be employed in a position where they are able to define the purposes and means of personal data processing. Given the above, executives, heads of operations, IT, HR or Marketing cannot serve as a DPO, as this would create a conflict of interest.

When such a situation arises, the best solution is to appoint an external DPO, as provided by Mikrocop. This ensures a simple and efficient way to avoid having to deal with conflict of interest issues.

It is important that a DPO is well aware of Slovenian and European legislation and has an in-depth understanding of the GDPR as well as experience in the field of personal data protection. In addition, a DPO must understand the data controller’s operations and organization, the data processing IT systems and processes, and the relevant personal data protection requirements.

A DPO uses a combination of in-depth knowledge and experience in a range of fields, for whom day-to-day practice is more than a routine matter. A problem may arise when your organization currently does not employ such a person and there is a dilemma over whether it is sensible to recruit a new employee into the role of DPO. We are here to provide you with an alternative to training a member of your staff or employing a new person: appoint an external DPO.

A DPO has to regularly monitor new developments in the law and in personal data protection practices. Employees are often so busy with their day-to-day obligations that they are unable to find time for further education and training.

Acquiring special qualifications or certificates confirming the necessary expertise in the field of personal data protection also requires financial outlays. This is just one more reason to simply hire an external DPO.