A data protection officer must fulfill the following three main factors in accordance with the requirements of Art. 37 para. 5 GDPR:

  • professional qualification with regard to expertise in the field of data protection law
  • Specialist knowledge in the field of data protection practice
  • Ability to perform the tasks specified in Art. 39 GDPR (see above)