Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Section 1 only requires A DPO when you are operating at "large scale".


Article 1 (c): the core activities of the controller or the processor consist of processing on a large scale of special categories of data pursuant to Article 9 or ....

What makes you believe that the "large scale" refers to the size of the organisation and not on the amount of processed data.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: