Question: a dpo must by law be appointed where?
Answer: A DPO should be appointed on the basis of their professional qualities, and in particular, experience and expert knowledge of data protection law. ... Organizations can contract out the role of DPO externally, based on a service contract with an individual or an organization.