一刀切 — DPO、AI 官、DSA 合规官和其他任务.pdf

1、DPO,AI Officer,DSA Compliance Officer and Other TasksJune 4,2024One Size Fits AllLinda C.FrazierDr.Andreas Splittgerber,CIPP/E,Partner Emerging Technologies,Reed Smith MunichNorman HeckhBruna M.W.Godoy,LL.M-CIPP/E,CIPM,FIPLATAM Privacy LeaderGE HealthCareWELCOME AND INTRODUCTIONSGlobal Officer Lands

2、capeEU Data Protection OfficerRequirements Monitoring data subjects Large scale special categories AdditionalLocal Requirements(e.g.Germany 20 employees)Qualifications Professional qualities Expertknowledge of data protection law Ability to fulfil the tasksTasks Inform organizationand employees on o

3、bligations under GDPR Monitor compliance with the GDPR Cooperate withsupervisory authoritiesPractical considerations Location of DPO Language Skills Capacity(fulltime vs.part-time)Termination protection Local Representative is different functionGovernance considerations External DPO vs internal DPO

4、Group DPO and local DPOs?DPO and data protection champions DPO reports to highest management Support with resourcesAI OfficerRequirementsUSA:No legal requirement Government requires federal agencies to appoint a Chief AIOfficerEUROPE:No legal requirement under AI ActRecommended to perform tasksQuali

5、ficationsTechnical expertiseRegulatory knowledge/expertise TasksUS Government:Coordinate agencys use of AI,Promote AI innovation,Manage risks from use of AIEurope:AI laws compliance oversightImplement risk management systems,Maintain technical documentation,Ensure data governance,Provide transparenc

6、y and human oversightPractical considerations AI Officer has sufficientauthority,stature and resources;AI Officer needs intensive technical expertise,but also regulatory/legal knowledgeLocal Representative is different functionGovernance considerationsGiven the tasks touch many areas of a business,t