Guidelines on Data Protection Officers (‘DPOs’) (wp243rev.01)
Guidelines on Data Protection Officers (‘DPOs’) (wp243rev.01)
Section 5.9 What resources should be provided to the DPO by the controller or the processor?
The DPO must have the resources necessary to be able to carry out his or her tasks.
Depending on the nature of the processing operations and the activities and size of the organisation, the following resources should be provided to the DPO:
-
active support of the DPO’s function by senior management
-
sufficient time for DPOs to fulfil their tasks
-
adequate support in terms of financial resources, infrastructure (premises, facilities, equipment) and staff where appropriate
-
official communication of the designation of the DPO to all staff
-
access to other services within the organisation so that DPOs can receive essential support, input or information from those other services
-
continuous training
Source: Article 38(2) of the GDPR
