Bodies that have appointed a Data Protection Officer (DPO/DPO)

The General Data Protection Regulation (GDPR) provides, since 25 May 2018, for the mandatory appointment of a Data Protection Officer (DPO) in public services and, under certain conditions, by companies and associations. The DPO - or data protection officer (DPO) - is responsible for ensuring the GDPR compliance of the personal data processing of the body that appointed him/her. Internal or external, the delegate may also be appointed on behalf of several bodies. To ensure the effectiveness of its tasks, a delegate: - must have professional qualities and specific knowledge; - must have the material and organisational resources, resources and positioning to enable it to carry out its tasks effectively and independently. For more information on the role of delegate: https://www.cnil.fr/en/devenir-delegue-la-protection-des-donnees. In accordance with the applicable texts, the CNIL publishes in an open and easily reusable format the name and professional contact details of the bodies that have appointed a data protection officer, as well as the means of contacting that officer. **Warning 1:** The published data, in particular the public contact details of the delegates, are **extracted from the delegates' designations as received by the CNIL** via its dedicated teleservice. Any delegate can request the modification of the contact details published directly to the Data Protection Officers Service of the CNIL. **Warning 2: ** ** Any reuse of published data that would have the nature of personal data (telephone number, e-mail address, etc.) presupposes, on the part of the re-user, the verification of full compliance with its obligations under the GDPR**, in particular in terms of informing the delegates concerned and respecting their other rights defined by the European regulation. Otherwise, the re-user would be exposed in particular to the sanctions provided for by the GDPR.