To put it simply, I handle company-wide issues related to the protection of data of natural persons. For example, traditional responsibilities include ensuring and complying with relevant data protection regulations, such as those of the Federal Data Protection Act (BDSG), the General Data Protection Regulation (GDPR) and all other national and international regulations. Among other things, I am responsible for reviewing and helping to design data processing in business, regulations and, for example, IT systems with regard to risks in the processing of personal data. I find it particularly exciting to be internationally active in my position as a data protection officer and can work with colleagues from a wide variety of fields.
However, my duties also include training employees, advising them and being available as a point of contact – both for employees and for the relevant supervisory authorities and affected parties. That's why raising awareness of the issue of data protection plays a central role for me. We can only succeed together to protect both our employees and our customers from data privacy incidents like those that occurred last summer with Cambridge Analytics and Facebook. Because in the end, data protection is not about data, but about real people, like you and me.