The role of the data protection officer has been strengthened. Their area of responsibility now increasingly includes monitoring GDPR compliance and advising on data protection impact assessments. New qualification requirements also apply.