Section 69 Designation of a data protection officerI1

(1)

The controller must designate a data protection officer, unless the controller is a court, or other judicial authority, acting in its judicial capacity.

(2)

When designating a data protection officer, the controller must have regard to the professional qualities of the proposed officer, in particular—

(a)

the proposed officer's expert knowledge of data protection law and practice, and

(b)

the ability of the proposed officer to perform the tasks mentioned in section 71.

(3)

The same person may be designated as a data protection officer by several controllers, taking account of their organisational structure and size.

(4)

The controller must publish the contact details of the data protection officer and communicate these to the F1Commission.

Annotations

Textual amendments

F1: Word in s. 69(4) substituted (30.9.2026) by The Data (Use and Access) Act 2025 (Consequential Amendments and Transitional Provision) Regulations 2026 (S.I. 2026/386), reg. 1(2), Sch. 2 para. 23(2)(3); S.I. 2026/1015, reg. 2(c)

Commencement

I1: S. 69 in force at 25.5.2018 by S.I. 2018/625, reg. 2(1)(c)