{"id":8325,"date":"2020-08-20T05:00:52","date_gmt":"2020-08-20T05:00:52","guid":{"rendered":"http:\/\/www.2b-advice.com\/en\/blog\/de\/blog\/freigabe-fur-die-dsgvo-und-ccpa-konformitat-copy-copy-copy-2-copy-copy\/"},"modified":"2026-08-11T13:15:24","modified_gmt":"2026-08-11T11:15:24","slug":"release-for-dsgvo-and-ccpa-conformity-copy-copy-copy-copy-2-copy-copy","status":"publish","type":"post","link":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/","title":{"rendered":"Data protection officer: When do you need one under the GDPR?"},"content":{"rendered":"<h2>When does a data protection officer become a legal obligation?<\/h2>\n<p><strong>For a few years now, the <a href=\"https:\/\/2b-advice.com\/en\/2025\/08\/25\/gemeinsame-verantwortlichkeit-fuer-social-media-fanpage-vg-koeln-bremst-bfdi-aus\/\">General Data Protection Regulation (GDPR)<\/a> effective throughout the European Union (EU).<\/strong><\/p>\n<p>And a data protection officer (DPO) is required in most institutions, especially companies that process personal data. The DPO is appointed on the basis of their expertise in data protection law and practice and serves as a point of contact for data protection issues and as a supervisor to ensure compliance with data protection regulations.<\/p>\n<p><b>Related articles from our blog:<\/b><br \/>\nWhat are the costs of a data protection officer?<br \/>\n<a href=\"https:\/\/2b-advice.com\/en\/blog\/externer-datenschutzbeauftragter-kosten\/\"><br \/>\nRead here <\/a><\/p>\n<h3>When does a data protection officer have to be appointed under the GDPR?<\/h3>\n<p>The GDPR stipulates when data controllers or processors must appoint a data protection officer in writing.<\/p>\n<p>For example, if a company has 20 or more employees involved in personal data processing, i.e. a public body or authority, with the exception of courts, as long as they are active in their judicial business.<\/p>\n<p>Data protection officers are mandatory from when and must also be appointed if the core activities of the controller or processor require systematic monitoring due to the nature, scope or extent of data subjects. In addition, a data protection officer must be appointed if personal data is processed in certain cases of criminal convictions or offenses.<\/p>\n<p>In other cases and regardless of the number of employees, a data protection officer may be appointed in accordance with the GDPR, but this is often only required for very specific and extensive personal data processing. This includes personal data processing relating to political\/religious beliefs, ethnicity\/race, health and sex life.<\/p>\n<p>In the case of groups of companies, public authorities or public bodies, a data protection officer may be appointed in accordance with Art. 37, taking into account the organizational structure and size, as long as the data protection officer is permanently available.<\/p>\n<h3>When do you need a data protection officer?<\/h3>\n<p>Despite the new GDPR, the German Federal Data Protection Act (BDSG) applies where the GDPR has no specific regulations. So, when do you need a data protection officer? According to the BDSG, a data protection officer is mandatory if 10 or more people process personal data automatically. In addition, companies must appoint a data protection officer in writing if they transmit personal data on a commercial basis, transmit it anonymously or process it for market research or opinion polling.<\/p>\n<p>If your company has failed to investigate the need to appoint a data protection officer, an audit is recommended.<\/p>\n<p>You can find out more about the obligation of a <a href=\"https:\/\/2b-advice.com\/en\/blog\/datenschutzfolgenabschaetzung\/\">Data protection impact assessment<\/a>:<\/p>\n<p><b>Related articles from our blog:<\/b><br \/>\nData protection impact assessment (DPIA): What needs to be done?<br \/>\n<a href=\"https:\/\/2b-advice.com\/en\/blog\/datenschutzfolgenabschaetzung\/\"><br \/>\nRead here <\/a><\/p>\n<p><a href=\"https:\/\/2b-advice.com\/en\/blog\/dsvgo-geldbussen\/\">Fines as a penalty under the GDPR<\/a> can lead to costly sanctions. The company is only protected from fines if this data protection officer is appointed correctly. This is formally finalized in writing with a signed certificate of appointment from the management.<\/p>\n<p>To summarize when a data protection officer is needed; A data protection officer is a person with expertise in data protection law who advises an organization on data protection law and ensures that data protection regulations are complied with. They are necessary when certain data is processed and a breach of these regulations can be punished with high sanctions by the GDPR.<\/p>","protected":false},"excerpt":{"rendered":"<p>When does a data protection officer become a legal obligation? The General Data Protection Regulation (GDPR) has been in force throughout the European Union (EU) for a few years now. And a data protection officer (DPO) is required in most institutions, especially companies that process personal data. This person is appointed based on their expertise in data protection law and practice and serves as a point of contact for data protection issues and as an overseer that ...<\/p>","protected":false},"author":1,"featured_media":8337,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-8325","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-datenschutz-unternehmen"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Datenschutzbeauftragter: Ab wann braucht man einen gem\u00e4\u00df DSGVO?<\/title>\n<meta name=\"description\" content=\"Nach DSGVO wird vorgegeben ab wann Unternehmen einen Datenschutzbeauftragten schriftlich benennen m\u00fcssen.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/2b-advice.com\/en\/2020\/08\/20\/effective-date-of-the-gdpr\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Datenschutzbeauftragter: Ab wann braucht man einen gem\u00e4\u00df DSGVO?\" \/>\n<meta property=\"og:description\" content=\"Nach DSGVO wird vorgegeben ab wann Unternehmen einen Datenschutzbeauftragten schriftlich benennen m\u00fcssen.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/2b-advice.com\/en\/2020\/08\/20\/effective-date-of-the-gdpr\/\" \/>\n<meta property=\"og:site_name\" content=\"Ailance\" \/>\n<meta property=\"article:published_time\" content=\"2020-08-20T05:00:52+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-11T11:15:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/2b-advice.com\/wp-content\/uploads\/2020\/08\/Datenschutzbeauftragter-ab-wann.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"395\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"2BAdviceAilance\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"2BAdviceAilance\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/\"},\"author\":{\"name\":\"2BAdviceAilance\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/3288798779afc19fd56581c31f3b8ff8\"},\"headline\":\"Datenschutzbeauftragter: Ab wann braucht man einen gem\u00e4\u00df DSGVO?\",\"datePublished\":\"2020-08-20T05:00:52+00:00\",\"dateModified\":\"2026-08-11T11:15:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/\"},\"wordCount\":497,\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/Datenschutzbeauftragter-ab-wann.jpg\",\"articleSection\":[\"Datenschutz\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/\",\"name\":\"Datenschutzbeauftragter: Ab wann braucht man einen gem\u00e4\u00df DSGVO?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/Datenschutzbeauftragter-ab-wann.jpg\",\"datePublished\":\"2020-08-20T05:00:52+00:00\",\"dateModified\":\"2026-08-11T11:15:24+00:00\",\"description\":\"Nach DSGVO wird vorgegeben ab wann Unternehmen einen Datenschutzbeauftragten schriftlich benennen m\u00fcssen.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/#primaryimage\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/Datenschutzbeauftragter-ab-wann.jpg\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/Datenschutzbeauftragter-ab-wann.jpg\",\"width\":1920,\"height\":395,\"caption\":\"Datenschutzbeauftragter: Ab wann?\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2020\\\/08\\\/20\\\/ab-wann-dsgvo\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/2b-advice.com\\\/de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Datenschutzbeauftragter: Ab wann braucht man einen gem\u00e4\u00df DSGVO?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"name\":\"2B Advice\",\"description\":\"By 2B Advice\",\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\",\"name\":\"2B Advice GmbH\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"width\":287,\"height\":401,\"caption\":\"2B Advice GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/2b-advice-group\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/3288798779afc19fd56581c31f3b8ff8\",\"name\":\"2BAdviceAilance\",\"sameAs\":[\"https:\\\/\\\/2b-advice.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Data protection officer: When do you need one under the GDPR?","description":"The GDPR stipulates when companies must appoint a data protection officer in writing.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/effective-date-of-the-gdpr\/","og_locale":"en_US","og_type":"article","og_title":"Datenschutzbeauftragter: Ab wann braucht man einen gem\u00e4\u00df DSGVO?","og_description":"Nach DSGVO wird vorgegeben ab wann Unternehmen einen Datenschutzbeauftragten schriftlich benennen m\u00fcssen.","og_url":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/effective-date-of-the-gdpr\/","og_site_name":"Ailance","article_published_time":"2020-08-20T05:00:52+00:00","article_modified_time":"2026-08-11T11:15:24+00:00","og_image":[{"width":1920,"height":395,"url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2020\/08\/Datenschutzbeauftragter-ab-wann.jpg","type":"image\/jpeg"}],"author":"2BAdviceAilance","twitter_card":"summary_large_image","twitter_misc":{"Written by":"2BAdviceAilance","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/#article","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/"},"author":{"name":"2BAdviceAilance","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/3288798779afc19fd56581c31f3b8ff8"},"headline":"Datenschutzbeauftragter: Ab wann braucht man einen gem\u00e4\u00df DSGVO?","datePublished":"2020-08-20T05:00:52+00:00","dateModified":"2026-08-11T11:15:24+00:00","mainEntityOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/"},"wordCount":497,"publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2020\/08\/Datenschutzbeauftragter-ab-wann.jpg","articleSection":["Datenschutz"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/","url":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/","name":"Data protection officer: When do you need one under the GDPR?","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/#primaryimage"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2020\/08\/Datenschutzbeauftragter-ab-wann.jpg","datePublished":"2020-08-20T05:00:52+00:00","dateModified":"2026-08-11T11:15:24+00:00","description":"The GDPR stipulates when companies must appoint a data protection officer in writing.","breadcrumb":{"@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/#primaryimage","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2020\/08\/Datenschutzbeauftragter-ab-wann.jpg","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2020\/08\/Datenschutzbeauftragter-ab-wann.jpg","width":1920,"height":395,"caption":"Datenschutzbeauftragter: Ab wann?"},{"@type":"BreadcrumbList","@id":"https:\/\/2b-advice.com\/en\/2020\/08\/20\/ab-wann-dsgvo\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/2b-advice.com\/de\/"},{"@type":"ListItem","position":2,"name":"Datenschutzbeauftragter: Ab wann braucht man einen gem\u00e4\u00df DSGVO?"}]},{"@type":"WebSite","@id":"https:\/\/2b-advice.com\/en\/#website","url":"https:\/\/2b-advice.com\/en\/","name":"2B Advice","description":"By 2B Advice","publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/2b-advice.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/2b-advice.com\/en\/#organization","name":"2B Advice GmbH","url":"https:\/\/2b-advice.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","width":287,"height":401,"caption":"2B Advice GmbH"},"image":{"@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/2b-advice-group\/"]},{"@type":"Person","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/3288798779afc19fd56581c31f3b8ff8","name":"2BAdviceAilance","sameAs":["https:\/\/2b-advice.com"]}]}},"_links":{"self":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/8325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/comments?post=8325"}],"version-history":[{"count":3,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/8325\/revisions"}],"predecessor-version":[{"id":44977,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/8325\/revisions\/44977"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media\/8337"}],"wp:attachment":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media?parent=8325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/categories?post=8325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/tags?post=8325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}