Two years ago, our CEO, Vitorino Gouveia, attended \u201cConversas (In)Seguras\u201d, an event organised by APDPO Portugal, where the moderators pose questions on current affairs and a wide range of subject areas. The moderators addressed the topic \u201cThe Organisation\u2019s Responsibilities towards the DPO\u201d. The following topics were discussed:<\/p>\n
The organisation must appoint a DPO \u2013 whether internally or externally, and whether on a voluntary or mandatory basis \u2013 register them with the National Data Protection Commission (CNPD), and disclose the DPO\u2019s contact details to its staff, customers and other stakeholders.<\/p>\n
The organisation must ensure the DPO\u2019s independence from the organisational hierarchy, provide the DPO with the resources necessary to carry out their duties, allow the DPO to communicate directly with senior management, and ensure that the DPO is able to issue dissenting opinions.<\/p>\n
Risk Management<\/p><\/h3>\n
The organisation must involve the DPO in risk management. This includes the data protection impact assessment (DPIA). It must also implement information security measures appropriate to the identified risks and report data breaches to the CNPD and the relevant data subjects.<\/p>\n
Incident Management<\/p><\/h3>\n
The organisation must also involve the DPO in the management of information security and data protection incidents and notify the CNPD and the relevant data subjects in the event of a data breach.<\/p>\n
The organisation must provide organisational support, material resources such as email, a telephone and access to information systems, and ongoing training in data protection.<\/p>\n
Where the processing of personal data poses a high risk to data subjects\u2019 rights, the organisation must carry out a DPIA and seek the DPO\u2019s opinion on it.<\/p>\n
By fulfilling its obligations towards the DPO, the organisation demonstrates its commitment to data protection and builds trust amongst its staff, customers and partners.<\/p>\n\n\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2,"featured_media":503,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"pagelayer_contact_templates":[],"_pagelayer_content":"","footnotes":""},"categories":[26],"tags":[],"class_list":["post-1410","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sem-categoria-en"],"_links":{"self":[{"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/posts\/1410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/comments?post=1410"}],"version-history":[{"count":3,"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/posts\/1410\/revisions"}],"predecessor-version":[{"id":1413,"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/posts\/1410\/revisions\/1413"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/media\/503"}],"wp:attachment":[{"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/media?parent=1410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/categories?post=1410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/apustrust.com\/web-qa\/wp-json\/wp\/v2\/tags?post=1410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}