Questions regarding EU GDPR

1. If I have multiple subsidiaries in more than one EU country, do I need to appoint a Lead Supervisory Authority?

Appointing a Lead Supervisory Authority is something that is provided for your convenience and is not mandatory. So, you can decide to appoint just one or you can choose to deal independently with all the Supervisory Authorities where your subsidiaries are located.

2. Do I need to register in all EU countries where the subsidiaries are located?

Registration is something that the GDPR left to the local Supervisory Authorities to decide. My advice is to check the website of the Supervisory Authorities and check if you need to register. Some EU countries do not require registration such as France and Romania but others do, such as the UK.

3. Can I appoint just one DPO for all of the subsidiaries or I would need one in each country?

Not necessarily, depending on your activities you can decide to appoint just one DPO to handle multiple jurisdictions. However, you need to be aware that the DPO may need to interact with the data subjects and the Supervisory Authorities in those jurisdictions which may require knowledge on the local language as well as legislation.
If you want to learn more about the tasks of a DPO check out this free webinar “ Role of the DPO according to EU GDPR” (https://advisera.com/eugdpracademy/webinar/role-of-the-dpo-according-to-eu-gdpr-free-webinar-on-demand/).

4. Based on your experience how much time and resources are needed to become compliant whit the GDPR?

Time and resources to become compliant with the EU GDOR is closely linked with your activities as well as your staff. We have developed this “EU GDPR Compliance Duration Calculator” (https://advisera.com/eugdpracademy/eu-gdpr-compliance-duration-calculator/).