A data protection officer (DPO) is an internal or external appointed person with strong knowledge of the data protection regulation who acts as the point of contact both for the competent supervisory authority and for the data subjects whose data is processed.