--- title: What is a data protection officer? - TrueVault description: A data protection officer (DPO) is an individual tasked with ensuring a company exhibits good data governance by maintaining compliance with GDPR and acting as a liaison between an organization and public authorities for all things GDPR. Learn more about DPOs with our FAQs about GDPR. --- - [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa) - [GDPR Compliance](https://safe.truevault.com/gdpr-guide) - [Personal Data](https://safe.truevault.com/learn/what-is-personal-data) - [DSAR](https://safe.truevault.com/learn/explaining-gdpr-data-subject-requests) - [HIPAA](https://safe.truevault.com/learn/hipaa) - [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-phi) - [PHI](https://safe.truevault.com/protected-health-information) - [Resources](https://safe.truevault.com/learn/) - [Resource Center](https://safe.truevault.com/learn/) - [TrueVault Safe](https://safe.truevault.com/help/truevault-safe) - [About](https://safe.truevault.com/about-us) - [Contact](https://safe.truevault.com/contact-us) - [Careers](https://careers.truevault.com/) - Solutions - [GDPR Compliance](https://safe.truevault.com/solutions/gdpr-compliance) - [HIPAA Compliance](https://safe.truevault.com/hipaa-compliance) - [For Applications](https://safe.truevault.com/solutions/application-compliance) - [For Data Exchanges](https://safe.truevault.com/solutions/data-exchange-compliance) - [Developers](https://safe.truevault.com/resources/index) - [Pricing](https://safe.truevault.com/safe-pricing) - [Blog](https://safe.truevault.com/blog) - [Login](https://console.truevault.com/login) - [Get Started](https://safe.truevault.com/get-started) # What is a Data Protection Officer?  A data protection officer (DPO) is an individual tasked with ensuring a company exhibits good data governance by maintaining compliance with [GDPR](https://safe.truevault.com/solutions/gdpr?hsLang=en) and acting as a liaison between an organization and public authorities for all things GDPR. The DPO can be an employee within the company, or external to the company, but s/he must not be subject to conflict of interest claims because of his/her role within the company. In addition, the DPO should have access to senior management within the company and cannot be penalized for carrying out his/her responsibilities. Below we’ve outlined a non exhaustive list of the DPO’s core responsibilities: - Ensuring his/her organization is aware of, and trained on, all relevant GDPR obligations - Training staff involved in data processing - Conducting audits to ensure compliance and address potential issues proactively - Acting as a liaison between his/her organization and public authorities - Acting as a liaison between the organization and data subjects - Monitoring performance and providing advice on the impact of data protection efforts - Maintaining comprehensive records of all data processing activities conducted by the company, including the purpose of all processing activities While all of these responsibilities are designed around helping an organization be compliant with GDPR, the DPO does not need any formal training or expertise. Often times the DPO has a legal background, but there is no specific requirement for DPOs. Have more questions about GDPR? Download our e-book.  [![Download the GDPR Guide](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/4693513/6cb8f5e6-c632-48b6-a820-a0072af7a56b.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/4693513/6cb8f5e6-c632-48b6-a820-a0072af7a56b) ### **Disclaimer** ### *This article is provided for general informational purposes only and is not intended to be legal advice.  By using the article, you agree that the information on this article does not constitute legal or other professional advice. The article is not a substitute for obtaining legal advice from a qualified attorney licensed in your state. The information on the article may be changed without notice and is not guaranteed to be complete, correct or up-to-date, and may not reflect the most current legal developments.* ### Latest Posts ## [Should Utah's Privacy Law Be on Your Radar?](https://safe.truevault.com/blog/utah-privacy-law-does-it-apply?hsLang=en) Phillip Walters / November 17, 2022 ## [Connecticut’s Privacy Law: Does It Apply to Your Business?](https://safe.truevault.com/blog/connecticut-privacy-law-does-it-apply?hsLang=en) Phillip Walters / November 10, 2022 ## [Global Privacy Control: A New Requirement for Compliance](https://safe.truevault.com/blog/global-privacy-control?hsLang=en) Phillip Walters / November 7, 2022 ### Blog Subscription ### Company - [Blog](https://safe.truevault.com/blog) - [Contact Us](https://safe.truevault.com/contact-us-2019) - [Careers](https://truevault.workable.com) - [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html) - [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/) ### Developers - [Patterns](https://safe.truevault.com/patterns) - [Documentation](https://docs.truevault.com/) - [Quick Start Guide](https://safe.truevault.com/quick-start-guide) - [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure) - [API Overview](https://safe.truevault.com/api-overview) ### Latest Posts ### Contact Us 201 Mission Street, 12th Floor San Francisco, CA 94105 Email: [hello@truevault.com](mailto:hello@truevault.com) 2021 © All Rights Reserved. [Privacy Policy](https://privacy.truevault.com/privacy-policy) | [Terms of Service](https://safe.truevault.com/terms-of-service?hsLang=en) - - -