In October 2024, Austria’s Data Protection Authority (hereinafter: the “DSB“) delivered a clear message: you cannot appoint your managing director as your Data Protection Officer (DPO) without risking a hefty fine. DSB imposed a €5,000 fine on a company for appointing its managing director as its DPO. The DSB found that the dual role created … Continue reading CEO as Data Protection Officer? Expect a Hefty Fine