Are you a large scale data processor of special categories of data as defined in Article 9? That includes data that can be used to determine racial or ethnic origin, health data, and data about sexual activity and orientation.
Large scale is helpfully not defined anywhere.
So if you run a site around a health condition or that lets
people specify their sexual orientation some place you might need a DPO.
https://gdpr-info.eu/art-37-gdpr/
Are you a large scale data processor of special categories of data as defined in Article 9? That includes data that can be used to determine racial or ethnic origin, health data, and data about sexual activity and orientation.
Large scale is helpfully not defined anywhere.
So if you run a site around a health condition or that lets people specify their sexual orientation some place you might need a DPO.