The Data Protection Officer doesn't need to be located in the EU. You may also not even need to appoint one, depending on what exactly your company does. You s

The Data Protection Officer doesn't need to be located in the EU. You may also not even need to appoint one, depending on what exactly your company does. You should read through the following sections of the GDPR carefully, especially Article 37 to determine if it seems to apply to you (the requirements are vague, but you should at least be able to get a general idea of whether it seems to apply to you or not): Article 37 - Designation of the data protection officer - https://gdpr-info.eu/art-37-gdpr/ https://gdpr-info.eu/art-37-gdpr/ Article 38 - Position of the data protection officer - https://gdpr-info.eu/art-38-gdpr/ https://gdpr-info.eu/art-38-gdpr/ Article 39 - Tasks of the data protection officer - https://gdpr-info.eu/art-39-gdpr/ https://gdpr-info.eu/art-39-gdpr/ Recital 97 - Data Protection Officer - https://gdpr-info.eu/recitals/no-97/ https://gdpr-info.eu/recitals/no-97/