Abstract

The GDPR does not preclude national legislation which enables DPO’s to be dismissed only for just cause, even if not related to the performance of the DPO’s task, insofar as such regulation does not undermine the GDPR’s objectives. A DPO may experience a conflict of interest when other tasks or duties would result in him or her determining the objectives and methods of processing personal data.