Building Digital Trust:Establishing an Ecosystem of Trust

and Protection in the Digital Age

November 9–11, 2016

You say tomato, I say tomato…the Role of the Chief Privacy Officer in 2020

2

TheEvolutionoftheCPO

Was Is WillBe

• Compliance• Administration• Sector-focused

• Regulatedbusiness• Peripheral

• Privacy• DataProtection• DataEthics

• DataMonetization• Relationshipbetween

individualandorganizations

3

• The controller and processor shall appoint a data protection officer (DPO) where their core activitiesconsist of processing operations that require regular and systematic monitoring of data subjects on alarge scale

• The DPO will monitor compliance with the regulation, provide advice on data protection impactassessments and act as the contact point for the supervisory authority

• Data subjects may contact the DPO with regards to the processing of their data and the exercise of theirrights under the GDPR.

• The DPO shall not receive instructions regarding the exercise of their tasks

• The DPO shall directly report to the highest level of management of the controller or processor.

ImpactofGDPR

GDPRDPO

4

PrecedentsandParallels

• Mostdirectprecedent• Pay-off:lessadmin,accept

theDPOasarepresentativeoftheDPA

• CPO/DPOcanbeoneperson;“theinterestsofthedatasubjectandthefirmshouldbealigned,sowhyisthisabigdeal”?

• MoneyLaunderingReportingOfficers:dutytoreport

• USSanctions- Monitors

• SouthAfricanombudsman:independentroleinbank,annualreport

• UKombudsman:entirelyseparatetoin-housecomplaints,onusonFOS

• UK:s.166

• Lifesciences– ethics,quality,safety

• Media:NewspaperOmbudsman

• Listedfirms:Whistleblowerhotlines,InternalAudit

GuidancefromRegulators?InteractionofDPO/DPA?Localvariation?

ThirdPartyProvision?LiabilityofDPO?ScarcityofResource?

Other

5

PredictingtheFuture

• Enhancedpowers

• Increasedfunding

• Higherprofile

• Administrator/Ombudsman

• Avoidedbybusiness/management?

• NewDPOrole

• Newdiscipline,culture,skills

• CPOevolvesawayfromDPO

• NewDPOrole

• Closeinteraction

• Healthytension

CPO/DPO CPO+DPO

CPO+ RegresstoDPO DIVERGE PARALLEL

Consequencesfor:

Building Digital Trust: Establishing an Ecosystem of Trust and Protection in the Digital Age