PREDNOSTI I NEDOSTACI ANGAŽOVANJA SPOLJNOG LICA ZA ZAŠTITU PODATAKA O LIČNOSTI KAO PRUŽAOCA USLUGA

Abstract

Designating a data protection officer is an obligation of some controllers and processors, but also an option for those for whom it is not mandatory. The data protection officer can be designated as an employee of the controller or processor - an internal data protection officer or hired through a contract - an external data protection officer. In this paper, after providing basic information related to the position of the data protection officer, the author tries to point out the advantages and disadvantages of appointing an external data protection officer as a service provider, as well as an internal data protection officer, for comparison. The work aims to highlight the basic advantages and disadvantages of both solutions and provide guidelines to controllers and processors regarding the appointment of data protection officers.