Data protection officers have a big job to do. If a DPO works for a company that the GDPR covers, they are required to perform the following tasks, per GDPR requirements:
Train their organization’s employees on GDPR compliance requirements and other relevant data privacy regulations
Conduct regular assessments and audits to ensure GDPR compliance.
Serve as the point of contact between the company and the relevant supervisory authority.
Maintain records of all data processing activities conducted by the company.
Respond to data subjects to inform them about how their personal data is being used and what measures the company has put in place to protect their data.
Ensure that data subjects’ requests to see copies of their personal data or to have their personal data erased are fulfilled or receive a response.