Employee Data Privacy

What is, and which organizations have to appoint a DPO?

A Data Protection Officer (DPO) is a person in charge of verifying the compliance of personal data processing with the applicable law. The DPO communicates information on processing personal data such as its: purposes, interconnections, types, categories of data subjects, length of retention and the department(s) in charge of implementing processing. DPOs may be required by law or recommended.

 

The European General Data Protection Regulation requires that data controllers and data processors designate a DPO in any case where:

• the processing of personal data is carried out by a public authority or body, except for courts acting in their judicial capacity;
• the core activities of the controller or the processor consist of processing operations which, by virtue of their nature, their scope and/or their purposes, require regular and systematic monitoring of data subjects on a large scale; or
• the core activities of the controller or the processor consist of processing, on a large scale, special categories of data and personal data relating to criminal convictions and offences.

The Polish Data Protection Act requires that businesses register their Data Protection Officer with the Polish Office for the Protection of Personal Data (https://uodo.gov.pl/) within 14 days of appointment. 

A DPO is not mandatory for every organization but is highly recommended.

 

---

Led by PeopleDoc’s Chief Legal & Compliance Officer, the HR Compliance Assist team relies on a network of internal and external compliance experts and lawyers, including the global law firm Morgan Lewis, to provide clients with best practices and recommendations on topics such as HR document retention, employee data privacy, and HR electronic records. HR Compliance Assist also provides local compliance monitoring and alert services in select countries where PeopleDoc’s customers have employees. HR Compliance Assist is a service exclusively available to PeopleDoc customers.