Legislation – Data Protection Act 2018

the proposed officer’s expert knowledge of data protection law and practice, and

the ability of the proposed officer to perform the tasks mentioned in section 71.

must ensure that the data protection officer does not receive any instructions regarding the performance of the tasks mentioned in section 71;

must ensure that the data protection officer does not perform a task or fulfil a duty other than those mentioned in this Part where such task or duty would result in a conflict of interests;

must not dismiss or penalise the data protection officer for performing the tasks mentioned in section 71.

the processing of that data subject’s personal data, or

the exercise of that data subject’s rights under this Part.

informing and advising the controller, any processor engaged by the controller, and any employee of the controller who carries out processing of personal data, of that person’s obligations under this Part,

providing advice on the carrying out of a data protection impact assessment under section 64 and monitoring compliance with that section,

co-operating with the Commissioner,

acting as the contact point for the Commissioner on issues relating to processing, including in relation to the consultation mentioned in section 65, and consulting with the Commissioner, where appropriate, in relation to any other matter,

monitoring compliance with policies of the controller in relation to the protection of personal data, and

monitoring compliance by the controller with this Part.

assigning responsibilities under those policies,

raising awareness of those policies,

training staff involved in processing operations, and

conducting audits required under those policies.