Article 37 – Designation of the data protection officer

Based on the Article 29 Working Party opinion examples of large-scale processing include:
· processing of patient data in the regular course of business by a hospital
· processing of travel data of individuals using a city’s public transport system (e.g. tracking via travel cards)
· processing of real time geo-location data of customers of an international fast food chain for statistical purposes by a processor specialized in providing these services
· processing of customer data in the regular course of business by an insurance company or a bank
· processing of personal data for behavioral advertising by a search engine
· processing of data (content, traffic, location) by telephone or internet service providers

The following do not do not constitute large-scale processing include:
· processing of patient data by an individual physician
· processing of personal data relating to criminal convictions and offences by an individual lawyer

To find put more about the DPO role check out our article “The role of the DPO in light of the General Data Protection Regulation” https ://advisera.com/eugdpracademy/knowledgebase/the-role-of-the-dpo-in-light-of-the-general-data-protection-regulation/

Thank you, Andrei !