Yes, you can do so. There is no need to hire a new person. You can either become a data protection specialist yourself or give the task to someone else in your team.