Data Protection Officer

Data Protection Officer means a natural or legal person, entrusted with facilitating the Controller's compliance with the GDPR.

A clinical trial involves processing an immense amount of personal data as well as sensitive data, therefore the appointment of a DPO is necessary.

Obligations in correspondence with the DPO role are:

  • adhere to the terms of the General Data Protection Regulation,
  • advise Controller on compliance with GDPR,
  • monitor compliance with the Regulation, with other Union or Member State data protection provisions, and with the policies of the Controller in relation to the protection of personal data,
  • provide advice where requested about the data protection impact assessment and monitor its performance pursuant to Article 35;
  • cooperate with the supervisory authority;
  • act as the contact point for the supervisory authority on issues relating to processing, including the prior consultation referred to in Article 36 of the Regulation, and consulting, where appropriate, regarding any other matter