Your company may be required to have a DPO when your core activities consist of processing personal data that:
- Requires regular and systematic monitoring of data subjects on a large scale,
- Requires monitoring customer activity online on a large scale, or
- Involves systematic processing of special categories of data (e.g. racial, ethnic origin, political, health, religious, trade union status, sexual orientation, etc.) on a large scale.