Data Protection Officer (DPO)

An appointed expert responsible for monitoring an organization's compliance with data protection obligations, advising on DPIAs, serving as the contact point for the Superintendency, and facilitating cooperation with the supervisory authority. The DPO must possess expert knowledge of data protection law and practices, particularly where processing is large-scale or high-risk.

An individual or function an organization must appoint (or designate an equivalent role) to oversee compliance with the NDPA, document responsibilities, coordinate with the NDPC, and support implementation of data protection measures and responses to data subject rights and breaches.

A role to be appointed (initially required for public sector entities under forthcoming amendments) responsible for promoting and overseeing personal data protection matters within an organization, liaising with the supervisory authority, and ensuring internal compliance with PDPA obligations.

An individual appointed by an organisation to ensure compliance with the PDPA and related data protection policies and guidelines.