If you process systematic high volumes of personal data or you are a public authority you must have a Data Protection Officer (DPO).
However, although you might not reach this threshold, consider having a Data Protection Lead in your organisation. A Data Protection Lead helps you to embed data protection throughout your business.
