It is highly recommended - whilst having a Data Protection Officer (DPO) may not always be a strict legal requirement, Supervisory Authorities stress the importance of organisations complying with the UK & EU GDPR, one of the requirements of which is to demonstrate accountability.  A Data Protection Officer is an independent and qualified expert in data protection, someone who is adequately resourced and reports to the highest management level in an organisation. They can help you operate within the law by advising and monitoring compliance, and hence playing a key role in your ensuring the effectiveness of your organisation’s data protection compliance programme.