The Data Protection Officer, an ubiquitous role nobody really knows
Francesco Ciclosi, Fabio Massacci
TL;DR
This paper explores the multifaceted role of the Data Protection Officer, highlighting its importance in managing socio-technical risks and the diverse skill set required for effective privacy and cybersecurity governance.
Contribution
It provides an analysis of the DPO role's responsibilities and challenges, emphasizing its interdisciplinary nature and practical implications in organizational risk management.
Findings
DPOs bridge legal, management, and technical domains.
The role is crucial in addressing socio-technical risks.
DPOs face challenges due to diverse skill requirements.
Abstract
Among all cybersecurity and privacy workers, the Data Protection Officer (DPO) stands between those auditing a company's compliance and those acting as management advisors. A person that must be somehow versed in legal, management, and cybersecurity technical skills. We describe how this role tackles socio-technical risks in everyday scenarios.
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.