The DPO and the messenger of bad news

Abstract

The unique position of the DPO further requires a direct reporting line to the highest management level of the controller. In addition, the DPO shall not be dismissed for performing his tasks.4 Since the legal position of the DPO is very strong, the practice of the DPOs shows a different picture. In Germany the DPO had a similar legal position before GDPR became applicable. However, the power of the DPO was in practice much weaker than his legal position. 1.