Building Digital Trust:Establishing an Ecosystem of Trust
and Protection in the Digital Age
November 9–11, 2016
You say tomato, I say tomato…the Role of the Chief Privacy Officer in 2020
2
TheEvolutionoftheCPO
Was Is WillBe
• Compliance• Administration• Sector-focused
• Regulatedbusiness• Peripheral
• Privacy• DataProtection• DataEthics
• DataMonetization• Relationshipbetween
individualandorganizations
3
• The controller and processor shall appoint a data protection officer (DPO) where their core activitiesconsist of processing operations that require regular and systematic monitoring of data subjects on alarge scale
• The DPO will monitor compliance with the regulation, provide advice on data protection impactassessments and act as the contact point for the supervisory authority
• Data subjects may contact the DPO with regards to the processing of their data and the exercise of theirrights under the GDPR.
• The DPO shall not receive instructions regarding the exercise of their tasks
• The DPO shall directly report to the highest level of management of the controller or processor.
ImpactofGDPR
GDPRDPO
4
PrecedentsandParallels
• Mostdirectprecedent• Pay-off:lessadmin,accept
theDPOasarepresentativeoftheDPA
• CPO/DPOcanbeoneperson;“theinterestsofthedatasubjectandthefirmshouldbealigned,sowhyisthisabigdeal”?
• MoneyLaunderingReportingOfficers:dutytoreport
• USSanctions- Monitors
• SouthAfricanombudsman:independentroleinbank,annualreport
• UKombudsman:entirelyseparatetoin-housecomplaints,onusonFOS
• UK:s.166
• Lifesciences– ethics,quality,safety
• Media:NewspaperOmbudsman
• Listedfirms:Whistleblowerhotlines,InternalAudit
GuidancefromRegulators?InteractionofDPO/DPA?Localvariation?
ThirdPartyProvision?LiabilityofDPO?ScarcityofResource?
Other
5
PredictingtheFuture
• Enhancedpowers
• Increasedfunding
• Higherprofile
• Administrator/Ombudsman
• Avoidedbybusiness/management?
• NewDPOrole
• Newdiscipline,culture,skills
• CPOevolvesawayfromDPO
• NewDPOrole
• Closeinteraction
• Healthytension
CPO/DPO CPO+DPO
CPO+ RegresstoDPO DIVERGE PARALLEL
Consequencesfor:
Building Digital Trust: Establishing an Ecosystem of Trust and Protection in the Digital Age
Top Related