Skip to main content

Do I need a Data Protection Officer (DPO)?

2. Do your organisation's core activities require regular and systematic monitoring of individuals on a large scale?

For example, tracking and monitoring individuals' behaviour, such as on the internet or on CCTV. Large-scale processing can include:

  • the numbers of data subjects;
  • the volume of personal data being processed;
  • the range of different data items being processed;
  • the geographical extent of the activity; and
  • the duration or permanence of the activity.