Requirements and tasks

¹ The data protection officer must meet the following requirements:

• a.

  He or she has the required specialist knowledge.

• b.

  He or she carries out his or her work in relation to the federal body in a professionally independent manner and is not bound by instructions.

² He or she must carry out the following tasks:

• a.

  He or she participates in applying the data protection regulations, in particular in that he or she:

  • 1.

    examines the processing of personal data and recommends corrective measures if a breach of the data protection regulations is established;

  • 2.

    advises the controller on preparing the data protection impact assessment and reviews its implementation.

• b.

  He or she serves as a contact point for data subjects.

• c.

  He or she trains and advises employees of the federal body on data protection matters.