Under GDPR, which role is responsible for ensuring technology systems process personal data lawfully, and what is their primary obligation?
-
A
The Data Protection Officer (DPO), who oversees compliance and advises on data protection obligations
-
B
The CTO, who must personally approve every data processing request
-
C
The CISO, who encrypts all personal data by default
-
D
The CEO, who signs all data processing agreements