How do I know if I need a data protection specialist?
GDPR states that a data protection specialist is necessary if:
- Data processing is performed by a public authority or organisation.
- The fundamental actions of the controller or the processor consist of processing activities which in their essence, scope and/or purpose require regular and systematic data subject surveillance on a wide scope.
- The fundamental actions of the controller or the processor incorporate special categorical data stated in Paragraph 1 of Article 9 and Article 10 and they are not affected by exceptions stated in Paragraph 2 of Article 9.