Call us on +(33)4 28 70 91 81

Article 39 of the GDPR: Missions of the data protection officer (DPO)

Article 39 of the GDPR: Missions of the data protection officer (DPO)

Article 39 of the GDPR details the main missions of the data protection officer (DPO). He acts as an advisor, controller and key contact for matters relating to the protection of personal data.

Article 39 of the GDPR explained

The DPO is responsible for:

  • Inform and advise the data controller and employees on GDPR obligations;
  • Monitor compliance with regulations and internal policies;
  • Advisor on carrying out impact analyzes (AIPD);
  • Cooperate with the CNIL (or other supervisory authority);
  • Be the point of contact for the CNIL and for the people concerned.

He must act with independence and objectivity, while taking into account the activities of the company.

Why is this article important for your GDPR compliance?

The DPO is one central player in GDPR compliance. Thanks to its defined missions, it guarantees the implementation of good practices and the legal security of the organization. Its role is operational, strategic and educational.

How to comply with Article 39 of the GDPR?

  • Clarify the DPO’s missions in his mission letter or contract;
  • Give him the means to carry out his missions (time, budget, autonomy);
  • Facilitate cooperation with internal services and with the CNIL;
  • Document the actions carried out as part of its mission.

Examples of application of Article 39 of the GDPR

  • A DPO regularly trains employees in data protection;
  • It controls the processing register and internal procedures;
  • It supports an HR department in an impact analysis relating to employee surveillance.

Related Resources

Accelerate your compliance in just a few clicks

With our all-in-one solution, you can accelerate and ensure compliance easily:

  • Automate your compliance with our GDPR software
  • Supported or outsourced by our DPO experts
  • Raise awareness among your teams with our GDPR training e-learning

Request a demo with an expert

Assess your situation in 15 minutes with our free, no-obligation GDPR self-diagnosis.

GDPR: Self-assess now