Question: is a dpo personally liable?
Answer: The DPO isn't personally liable for data protection compliance. As the controller or processor it remains your responsibility to comply with the GDPR.