14.12.2017

How do I know if I need a data protection specialist?

 

GDPR states that a data protection specialist is necessary if:

  • Data processing is performed by a public authority or organisation.
  • The fundamental actions of the controller or the processor consist of processing activities which in their essence, scope and/or purpose require regular and systematic data subject surveillance on a wide scope.
  • The fundamental actions of the controller or the processor incorporate special categorical data stated in Paragraph 1 of Article 9 and Article 10 and they are not affected by exceptions stated in Paragraph 2 of Article 9.