Data Protection Officer
"Do not listen to your eyes and do not believe what you see" (R. Bach)
In an era where personal data protection has become a categorical imperative, the Data Protection Officer (DPO) is emerging as a strategic figure within organizations, going far beyond a simple consultant. The DPO is not just a guardian of regulatory compliance; he or she is the architect of trust, the mediator between respect for individual rights and the operational needs of the organization. A true DPO does not simply possess knowledge of Regulation (EU) 2016/679. It is essential that this figure have comprehensive legal training, combined with solid technical and organizational skills. Only in this way will the DPO be able to address daily complexities and anticipate future challenges in an ever-evolving landscape.
The recognition of a true Data Protection Officer lies not only in their title, but even more in their academic background, the languages they speak, and their ability to act pragmatically and creatively and to address new issues such as AI, the NIS2 Directive, and Cybersecurity, as well as applicable public law regulations (e.g., administrative transparency).
A DPO must demonstrate critical thinking, emotional intelligence, and proactivity in promoting a data protection culture within the organization.
Here are the "main" tasks of the DPO
Train the Data Controller, the Data Processor and the persons in charge
train and advise the controller or processor as well as the employees who carry out the processing on their obligations under the Regulation as well as other Union or Member State data protection provisions
Monitor GDPR compliance
monitor compliance with this Regulation, with other Union or Member State data protection provisions and with the policies of the controller or processor in relation to the protection of personal data, including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations and related audits
Evaluate processing pursuant to art. 35 GDPR
provide, if requested, an opinion on the data protection impact assessment and monitor its performance pursuant to Article 35 GDPR
Cooperate with the Italian Data Protection Authority
cooperate with the competent supervisory authority
Act as a point of contact
act as a contact point for the supervisory authority on issues relating to processing, including the prior consultation referred to in Article 36, and carry out, where appropriate, consultations on any other matter
We will not call you or use your data for marketing purposes.
Further information on the processing of personal data: www.himmeladvisors.it/privacypolicy
Dr. Garcia has obtained the Data Protection Officer Certification in accordance with the current UNI CEI EN 17740:2024, UNI/TS 11945:2024, SCH73 CEPAS standard and is registered in the CEPAS Data Protection Officer Register with registration number #531
We will not call you or use your data for marketing purposes.
Further information on the processing of personal data: www.himmeladvisors.it/privacypolicy
Why should my organization choose a competent and certified DPO?
The Data Protection Officer (DPO) plays a crucial role within any organization, serving as a cornerstone in safeguarding the personal data being processed. A DPO is not just a professional; they are a leader, an innovator, and a guardian of the values of integrity and responsibility. Their presence is essential to ensure that every decision made regarding personal data not only complies with applicable regulations but also enhances trust in the relationship between partners and, more generally, data subjects.
You need someone to help you understand, comprehend, and ensure regulatory compliance in a clear, simple, and appropriate manner.
DPO Service & Himmel Advisors
Himmel Advisors has dedicated and specialized consultants with experience as Data Protection Officers in various fields and sectors. Our professionals possess the necessary education, specific training, and professional experience requirements as set forth in Articles 38 and 39 of the GDPR. The DPO is an "independent" figure who must guarantee this independence and not be subject to any instructions regarding the performance of their duties.
Himmel Advisors guarantees this independence, not only with respect to the Data Controller, but also with respect to other roles or functions that may jeopardize the DPO's independence.
Our declaration of independence is public and can be consulted (in Italian) here
