4 ms·
Most companies do not need an EU resident DPO at all.
by gcthomas 8y ago
Most companies do not need an EU resident DPO at all.
- rdlecler1 8y agoHave a source on that? If you use Google Analytics you need to provide one.
- gcthomas 8y agoYou need a DPO if you are a public authority (eg government body or public school) or if you carry out "regular and systematic monitoring of data subjects on a large scale or when processing special categories of data …". If you receive data from Google Analytics that is aggregated into categories or regions (ie not identifiable) or on a small scale, then you are not in the realm of large scale, systematic monitoring, so no DPO needed.
- jacquesm 8y agoAlmost. You do need an EU Designated Representative. https://gdpr-info.eu/art-27-gdpr/ https://gdpr-info.eu/art-27-gdpr/ There is no such thing as a 'EU resident DPO'. I think you are confusing the two roles.
- gcthomas 8y agoThanks. I mixed up the name, though, not the role. Your link says that the requirement for an EU rep "shall not apply to: processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in Article 9(1) …" Most companies will not need an EU Designated Representative, in the same way local companies will not need a DPO.
- jacquesm 8y agoOccasional and large scale may not mean quite what you think they do. Occasional: once per year but every year is not occasional. Large scale: more than a few thousand records. Keep in mind that the law is written for ordinary people, but tech people will interpret that totally different.
- gcthomas 8y agoAbsolutely, I agree. I was responding, specifically, to @rdlecler1 who claimed that "Yes, every US company must hire an EU representative to be compliant." Many small orgs, even if serving EU citizens, will not need an EU Resident Representative. And if they do, they should be able to contract to an EU company to represent them, rather than need to directly employ an individual.
- jacquesm 8y agoI'm looking at the idea of providing that service for charities and hobby projects for free. Still not quite sure about my own legal exposure.