Skip to 0 minutes and 7 seconds Hello, my name Arjen Deenen. I work at the University of Groningen. I’m data protection officer, also DPO. I’m here to tell you a little bit about what I do as DPO at the university. I have three main tasks. First one is educating, second one is advising, and third one is supervising. Well, education is about educating people, how to process personal data, and being compliant with the GDPR. An example is using Windows+L combination to lock their workspace. It’s very effective but easy to understand. Besides the data protection aspects of the whole thing, I’m teaching about the legal aspects, for example, purpose limitation. I teach people that when they process personal data, they keep to one specific purpose when processing personal data.
Skip to 1 minute and 7 seconds Secondly, I advise a lot of colleagues at the university when they’re processing personal data. It’s a big misunderstanding that we, the DPOs, prohibit the processing of personal data. I actually enable and help people to process personal data within accordance to the law, the GDPR. And when we’re processing personal data, keep in mind the rights and freedoms of the people. My third task is supervising. And when I’m talking about supervising in a more broader sense, I look at all the principles. Do we apply all the privacy principles, like Privacy by Design? Besides that, I do supervise, for example, DPIAs, Data Protection Impact Assessments. I teach people how to find risks and how to find appropriate safeguards.
Skip to 2 minutes and 6 seconds The most important thing about being a DPO is creating bridges, creating awareness in the whole organisation. Of course, you need to know to the GDPR by heart. I think it’s more important to explain the spirit of the law
Skip to 2 minutes and 22 seconds to your colleagues: rather create a new mindset than impose new rules.
Meet the University of Groningen data protection officer
In this video, Arjen Deenen, data protection officer at University of Groningen, explains what his job and responsibilities are.
© University of Groningen