Question:Organization XYZ has just appointed aDPO.

UnderArticle 39(1)(e) of GDPR, theDPO acts as a contact point for supervisory authoritiesand must bereadily accessible for regulatory inquiries and investigations.

Option A is correctbecauseGDPR explicitly states that the DPO serves as a liaison between the organization and the supervisory authority.

Option B is incorrectbecausethe controller and processor are independent entities under GDPR, and the DPO does not facilitate their relationship.

Option C is incorrectbecausethe DPO does not act as a communication channel for internal company matters.

Option D is incorrectbecauseDPOs advise and monitor but do not make operational decisions.

References:

GDPR Article 39(1)(e)(DPO is a contact point for the supervisory authority)

Recital 97(DPO’s role in ensuring compliance)