English

The Data Protection Officer, an ubiquitous role nobody really knows

Cryptography and Security 2022-12-16 v1 Computers and Society

Abstract

Among all cybersecurity and privacy workers, the Data Protection Officer (DPO) stands between those auditing a company's compliance and those acting as management advisors. A person that must be somehow versed in legal, management, and cybersecurity technical skills. We describe how this role tackles socio-technical risks in everyday scenarios.

Keywords

Cite

@article{arxiv.2212.07712,
  title  = {The Data Protection Officer, an ubiquitous role nobody really knows},
  author = {Francesco Ciclosi and Fabio Massacci},
  journal= {arXiv preprint arXiv:2212.07712},
  year   = {2022}
}

Comments

Short version accepted for publication in IEEE Security & Privacy, Special Issue on Usable Security for Security Workers, 2023. IEEE Press. This report includes several supplemental materials not included in the journal publication