Data Protection Officers: The Unsung Heroes of the GDPR
Time 2 Minute Read

On May 29, 2018, Bojana Bellamy published a letter on the importance and value of data protection officers (“DPOs”) on the International Association of Privacy Professionals’ Privacy Perspectives blog, entitled A Letter to the Unsung Hero of the GDPR (the “Letter”). The Letter acknowledges the herculean efforts and boundless commitment DPOs and those in a similar role have demonstrated in preparing their organizations for the GDPR.

In the Letter, Bellamy recounts the immense number of tasks that DPOs have to engage in on a daily basis as part of the many different roles that they must play in balancing company data uses with data protection laws and customs. Among these tasks and roles, the Letter highlights that DPOs have to navigate vast and complex privacy laws and understand their organizations’ data usages and methods inside and out. They have to be able to communicate proficiently with technology teams and data scientists while being able to explain complex technical concepts to colleagues without a technological background. They must play the role of an ethicist to determine if a processing is fair and be a guardian of human rights, while also enabling innovation.

The Letter also serves as a thank you note to DPOs for their efforts, and credits them with being the catalyst for making data privacy more than just a compliance issue for many organizations, but also a key business and strategic issue. The Letter calls for DPOs to receive the recognition they deserve, not only from their respective organizations, but also from regulators, privacy activists, media and customers.

To read Bellamy’s full acknowledgment of data protection officers and their efforts, please see the full Letter.

You May Also Be Interested In

Time 3 Minute Read

Indiana’s comprehensive consumer privacy law, the Indiana Consumer Data Protection Act, is set to take effect on January 1, 2026. In advance of the law’s effective date, the Indiana Attorney General’s Office has published a Consumer Bill of Rights that provides guidance to both consumers and businesses.

Time 5 Minute Read

On November 19, 2025, the European Commission unveiled the much-anticipated digital omnibus legislative package (the “Digital Omnibus”), setting the stage for a new era of digital governance and regulatory simplification across the European Union. According to the Commission, this initiative is designed to enable European businesses to devote more energy to innovation and growth, rather than navigating complex compliance landscapes.

Time 2 Minute Read

On November 17, 2025, the Council of the European Union adopted new rules designed to strengthen cooperation among national data protection authorities, enhancing the enforcement of the EU General Data Protection Regulation.

Time 3 Minute Read

On November 4, 2025, the European Data Protection Board adopted its opinion on the European Commission’s draft decision regarding the adequacy of Brazil’s personal data protection framework. Once finalized, this decision will enable the free flow of personal data from the European Union to Brazil.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Archives

Jump to Page