Re:What does the GDPR actually mean for startups?
by marcus_holmes on Thursday August 30, 2018 @08:00AM
(#17875937)
there's nothing in the document you linked to, or the guidance that it links to (http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_...) that says the DPO can't have any role in the organisation. There's no "conflict of interest" clause I can see... but I'd welcome any clarification.
[ Parent
| on HN ]
Re:What does the GDPR actually mean for startups?
by pintxo on Thursday August 30, 2018 @08:24AM
(#17876085)
Check out §38 6
> 1The data protection officer may fulfil other tasks and duties. 2The controller or processor shall ensure that any such tasks and duties do not result in a conflict of interests.
It's difficult to ensure that there is no conflict of interests if the CEO === DPO.
Re:What does the GDPR actually mean for startups?
by boomboomsubban on Thursday August 30, 2018 @08:40AM
(#17876181)
What duties would you have that would cause a conflict of interest that aren't already against the GDPR? It seems that's the only situation where there would be an issue.
Re:What does the GDPR actually mean for startups?
by duxup on Thursday August 30, 2018 @08:36AM
(#17876160)
That seems really vauge. I'd argue anyone working for the company and getting paid could have a conflict of interest.
Re:What does the GDPR actually mean for startups?
by pintxo on Thursday August 30, 2018 @08:39AM
(#17876177)
Don't you think one could (contractually) minimize (probably not remove) conflicts of interest?
Quite obviously one will not be able to completely remove conflicts of interest as long as there is another (monetary) dependency. Which is the reason for a state owned regulatory agency in the first place.