Requirements and tasks

Article 26

The data protection officer must meet the following requirements:
1. a. He or she has the required specialist knowledge.
2. b. He or she carries out his or her work in relation to the federal body in a professionally independent manner and is not bound by instructions.
He or she must carry out the following tasks:
- a. He or she participates in applying the data protection regulations, in particular in that he or she:
  1. examines the processing of personal data and recommends corrective measures if a breach of the data protection regulations is established;
  2. advises the controller on preparing the data protection impact assessment and reviews its implementation.
- b. He or she serves as a contact point for data subjects.
- c. He or she trains and advises employees of the federal body on data protection matters.

Take a Brighter Approach to Privacy, AI, and Digital Governance Compliance