Position: Data protection officer
Category: Other
English level: fluent
Years of experience: 5


•	Systematically identifies, mitigates and monitors risks in connection with data protection.
•	Audits the processing of personal data within the organization and recommends corrective measures if find that the data protection regulations have been violated.
•	Assesses compliance of the data processing with the data protection requirements periodically. The auditing involves an assessment of whether the processes and systems for data processing fulfill the data protection requirements, and whether these processes and systems are in fact enforced in practice.
•	Recommends corrective measures to the DPG Board and/or the persons responsible for a processing activity within the organization in case of violation and advise them on how to avoid such violations in the future.
•	Maintains a list of the data collections that would otherwise be subject to registration with the responsible data protection authorities. The list must be kept up to date.
•	Makes data collections available to the responsible data protection authorities and to data subjects upon request.
•	Carries out duties independently and without instructions from the responsible persons of a specific processing activity.
•	Organizes regular training sessions for employees.
•	Handles complaints and data subject requests.
•	Manages security breaches where personal data has been compromised.
•	Has access to all data collections and all data processing, as well as to all information that he/she requires to fulfil his/her duties.
•	Drafts data protection policies and procedures for approval by the DPG Board.
•	Reviews, instructs, and monitors any suppliers involved in the processing of personal data and ensures appropriate contractual rights and obligations in supplier agreements.