The Data Protection Officer, an ubiquitous role nobody really knows
arXiv:2212.07712 · doi:10.1109/MSEC.2022.3222115
Abstract
Among all cybersecurity and privacy workers, the Data Protection Officer (DPO) stands between those auditing a company's compliance and those acting as management advisors. A person that must be somehow versed in legal, management, and cybersecurity technical skills. We describe how this role tackles socio-technical risks in everyday scenarios.
Short version accepted for publication in IEEE Security & Privacy, Special Issue on Usable Security for Security Workers, 2023. IEEE Press. This report includes several supplemental materials not included in the journal publication