Data protection officer

Under the UK General Data Protection Regulation (UK GDPR), certain organisations are required to appoint an individual to act as their data protection officer (DPO). Others may choose to appoint a DPO on a voluntary basis. In either case, the organisation will need to consider who should be the DPO, what the DPO’s duties will be and what the organisation’s obligations are in relation to the DPO.

For information on the circumstances where the UK GDPR requires you to appoint a DPO, see Practice Note: Data protection officer and DPO appointment decision tree.

Voluntary DPOs

You should consider whether to appoint a DPO even where you are not required to under the UK GDPR. Guidelines on DPOs published by the Article 29 Data Protection Working Party and subsequently endorsed by the European Data Protection Board (EDPB) (EDPB guidance) and the Information Commissioner’s Office (ICO) guidance encourage voluntary appointment of a DPO, but with an important caveat—it doesn’t matter whether your DPO’s appointment is voluntary or mandatory, if your organisation has a DPO, all the requirements of the UK GDPR relating to DPOs apply—see Practice Note: To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Risk & Compliance News

New Risk & Compliance forecast as at 20 November 2024

Our new Risk & Compliance forecast (as at 20 November 2024) is now live. This month we report on items including: (1) publication of the long-awaited government guidance on the failure to prevent fraud offence; (2) consultation by the Financial Action Task Force (FATF) on proposed changes to FATF Standards and updates to grey listing criteria by FATF to increase focus on risk; (3) updates on the Data (Use and Access) Bill and Employment Rights Bill, and (4) three new consultations from the Solicitors Regulation Authority (SRA) on client money management and consumer protection.

HM Treasury issues advisory on Oil Price Cap evasion tactics

HM Treasury (HMT)and the Office of Financial Sanctions Implementation (OFSI) have released an advisory concerning the Oil Price Cap (OPC) regime. The guidance specifically addresses evasion strategies involving the manipulation of product origin through the use of fabricated and falsified Certificates of Origin (CO). This advisory aims to alert relevant parties to the risks associated with such practices and to enhance compliance efforts within the oil trade sector.

Risk & Compliance weekly highlights—21 November 2024

This week's edition of Risk & Compliance weekly highlights includes: the latest financial sanctions updates, an updated list of businesses not compliant with money laundering regulations from HM Revenue & Customs (HMRC), initiation of a consultation for legal regulators to combat economic crime by the Legal Services Board (LSB) and final versions of a suite of new guidance to support in-house solicitors from the SRA.

FCDO implements new sanctions against international kleptocrats

The Foreign, Commonwealth & Development Office (FCDO) has announced a significant expansion of the UK's anti-corruption efforts through the imposition of sanctions on three high-profile kleptocrats and their associates. These measures, implemented under the Global Anti-Corruption Sanctions Regulations 2021 (SI 2021/488), include asset freezes and travel bans targeting individuals accused of embezzling substantial sums from Ukraine, Angola, and Latvia. The sanctions mark the commencement of a new campaign by the Foreign Secretary to combat corruption and illicit finance, with cross-governmental cooperation to protect UK interests and support global economic integrity. The initiative is bolstered by ongoing collaboration with the National Crime Agency's International Anti-Corruption Coordination Centre (IACCC) and International Corruption Unit (ICU), demonstrating a comprehensive approach to tackling financial crime and sanctions evasion.

View Risk & Compliance by content type :

News