The data protection officer (DPO) is a relatively new position for many companies. The role, responsibility, and reporting structure of a DPO are largely defined by the European Union’s (EU) General Data Protection Regulation (GDPR).