The organization must designate a Personal Data Protection Officer (PDPO) responsible for overseeing the effective implementation of data protection policies, compliance with regulatory requirements, and management of personal data practices across the organization.

The PDPO’s responsibilities should include:

• Acting as the primary liaison with the competent authority and ensuring timely communication and implementation of official directives.
• Supervising internal reviews, audits, and impact assessments related to data protection, maintaining proper documentation, and issuing recommendations for improvement.
• Coordinating responses to data subject requests and ensuring their rights can be exercised effectively and without undue delay.
• Managing the notification process for personal data breaches, including communication with authorities and affected individuals where required.
• Overseeing the maintenance and accuracy of records of processing activities and ensuring they remain up to date.
• Identifying, reporting, and following up on data protection violations to ensure corrective actions are taken.

The PDPO must have sufficient authority, independence, and access to necessary resources to perform these duties effectively, ensuring accountability and continuous compliance across the organization.