To answer this question, please select “yes” if your organization has employed or contracted an individual with the title of “Data Protection Officer.” A Data Protection Officer is a person that assists the organization in maintaining privacy compliance, provides advice on Data Protection Impact Assessments, and acts as a contact point for consumers and the supervisory authority. The following types of entities may be required to have a Data Protection Officer: 

  • Public authorities or bodies; 

  • Organizations whose core activities require large scale, systematic, and regular monitoring of individuals; and 

  • Organizations whose core activities consist of large scale processing of special categories of personal information or information related to criminal convictions or offenses. 


Please select “yes” to this question if your organization has employed or contracted an individual with the title of “Data Protection Officer.” If you answer “yes” to this question, you will be prompted to enter in the name and email address of this individual in the fields provided. If your organization has not employed or contracted an individual with such a title, please select “no” to this question.


Related privacy laws 

  • General Data Protection Regulation (GDPR)
  • United Kingdom Data Protection Act (UK DPA)