The General Data Protection Regulation in the Spanish System: The Data Protection Officer
Abstract
The new General Data Protection Regulation (GDPR) is set to replace the Directive 95/46/EC, effective May 25, 2018. In accordance with the principle of primacy of the EU law, the GDPR shall be directly applicable in each Member State and will lead to a greater degree of data protection harmonization across EU Members. The GDPR contains a number of new protections for EU data subjects and obligations, among them, a significant impact over national systems, as it requires in certain cases the mandatory designation of a Data Protection Officer (DPO). Thus, emphasis is put on the importance of the new position of DPO and consequences over the Spanish national system.