Is Appointing a DPO Even Required for You?

All three conditions

Appointing a DPO is mandatory if any of these apply: a large-scale public entity, or your core activity involves regular and systematic monitoring of individuals, or your core activity involves processing sensitive data.

Why many organizations miss it

Conditions two and three don’t actually require large scale. An insurer, a hospital, or a platform that regularly collects health or financial data all fall under the requirement regardless of headcount. Once appointed, the DPO’s details have to be provided to SDAIA through the National Data Governance Platform.