Answer 5 questions and find out in under a minute whether your company, school or organisation in Spain must appoint a Data Protection Officer (DPO) under the GDPR and the Spanish Data Protection Act (LOPDGDD). We do not ask for personal data and we do not use cookies.
General guidance based on Article 37 GDPR and Article 34 of the Spanish LOPDGDD. It does not replace a legal analysis of your specific case. Your answers are not stored or sent anywhere.
When is a DPO mandatory in Spain?
The GDPR requires a DPO for public authorities and bodies, and for organisations whose core activities consist of regular and systematic monitoring of people on a large scale, or of large-scale processing of special category data or criminal records.
Spain’s LOPDGDD adds a list of activities where a DPO is always mandatory, including schools and universities, healthcare centres, credit institutions, insurers, investment firms, electricity and gas suppliers, profiling-based advertising, solvency and fraud databases, credit reporting, online gambling, private security, telecoms and digital services processing data at large scale, professional associations and sports federations processing minors’ data.
If you need a DPO, Auratech acts as an external DPO for companies and for more than 30 schools.
