News for hackers. Stuff that matters.

A comment on GDPR: Removing Monal from the EU. Parent comment

Re:GDPR: Removing Monal from the EU by e12e on Friday May 18, 2018 @08:27AM (#17100835)
Perhaps more important, dpo is just another hat - if he's ceo,cfo,cto - he can be dpo too?
[ Parent | on HN ]
Re:GDPR: Removing Monal from the EU by krfsm on Friday May 18, 2018 @08:43AM (#17100953)
There are limitations, namely:

"There must not be a conflict of interest between the duties of the individual as a DPO and her other duties, if any."

Specifically they recommend against also being the data controller. I.e. you shouldn't be responsible both for handling personal data and verifying compliance of said handling.

[ Parent | on HN ]
Re:GDPR: Removing Monal from the EU by johnchristopher on Friday May 18, 2018 @09:32AM (#17101273)
No, because you wouldn't be independent enough. A CFO or a CTO would tell its board things are okay because it isn't in its interest to do otherwise.

That's why some independent DPO jobs are appearing.

But the DPO is a small cog in the machine. Updating the processes is the most time and resource consuming regarding the GDPR.

[ Parent | on HN ]