A Data Protection Officer or DPO is an independent expert in data protection used within the GDPR to enforce certain aspects of the regulation. However, not all organizations need to employ a DPO. Article 37 of GDPR explains the rules of DPO appointment based on being a public authority, carrying out large-scale, regularly monitoring data, or processing at large-scale, special data categories. Under certain circumstances, several organizations could share a single DPO.