DPO \u2014 D\u00e9l\u00e9gu\u00e9 \u00e0 la Protection des Donn\u00e9es. Ce terme revient souvent dans les discussions autour du RGPD. Certaines entreprises doivent obligatoirement en d\u00e9signer un. D’autres ont int\u00e9r\u00eat \u00e0 le faire sans y \u00eatre contraintes. Beaucoup confondent le DPO avec un responsable informatique ou un responsable juridique. Et certaines pensent qu’avoir un DPO les met automatiquement en conformit\u00e9.<\/p>\n
Aucune de ces confusions n’est anodine.
\nQui est oblig\u00e9 de d\u00e9signer un DPO ?<\/p>\n
L’obligation de d\u00e9signer un DPO concerne certaines cat\u00e9gories d’organisations : autorit\u00e9s publiques, organismes r\u00e9alisant \u00e0 grande \u00e9chelle un suivi syst\u00e9matique des personnes, ou traitant \u00e0 grande \u00e9chelle des donn\u00e9es sensibles (sant\u00e9, donn\u00e9es judiciaires, etc.).<\/p>\n
Pour la plupart des PME, la d\u00e9signation n’est pas obligatoire \u2014 mais cela ne signifie pas qu’elle est inutile. Et cela ne signifie pas non plus que les obligations RGPD ne s’appliquent pas.
\nCe que le DPO n’est pas<\/p>\n
Le DPO n’est pas responsable de la conformit\u00e9 RGPD de l’entreprise \u2014 c’est le dirigeant qui l’est. Le DPO conseille, contr\u00f4le, sensibilise. Mais il ne peut pas \u00eatre tenu responsable des manquements de l’entreprise \u00e0 la place du responsable de traitement. C’est une distinction que beaucoup de dirigeants n’ont pas bien int\u00e9gr\u00e9e.<\/p>\n
Le DPO n’est pas non plus un simple r\u00e9f\u00e9rent informatique. Son r\u00f4le est juridique autant que technique. Il doit avoir une vraie ind\u00e9pendance \u2014 ce qui pose des questions pratiques quand on veut d\u00e9signer un salari\u00e9 interne.
\nL’option du DPO externalis\u00e9<\/p>\n
De plus en plus d’entreprises choisissent de confier le r\u00f4le de DPO \u00e0 un professionnel ext\u00e9rieur. Cette option offre plusieurs avantages : expertise, ind\u00e9pendance, flexibilit\u00e9. Mais elle ne dispense pas l’entreprise de s’impliquer activement dans sa conformit\u00e9 \u2014 le DPO externalis\u00e9 n’est pas l\u00e0 pour tout faire \u00e0 votre place.
\n\ud83d\udccb DPO externalis\u00e9 : ce que le RGPD exige
\nLa d\u00e9signation d’un DPO externalis\u00e9 doit respecter certaines conditions formelles \u2014 contrat de services, d\u00e9signation aupr\u00e8s de la CNIL, publication des coordonn\u00e9es. Ces formalit\u00e9s sont souvent n\u00e9glig\u00e9es.
\nVous vous interrogez sur la n\u00e9cessit\u00e9 d’un DPO ou sur l’externalisation de cette fonction ?<\/p>\n
Me Mizrahi intervient en qualit\u00e9 de DPO externalis\u00e9 et vous accompagne dans la gouvernance RGPD de votre structure.<\/p>\n","protected":false},"excerpt":{"rendered":"
DPO \u2014 D\u00e9l\u00e9gu\u00e9 \u00e0 la Protection des Donn\u00e9es. Ce terme revient souvent dans les discussions autour du RGPD. Certaines entreprises […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[63,5],"tags":[53,54,77,11],"class_list":["post-51","post","type-post","status-publish","format-standard","hentry","category-conformite-rgpd","category-dpo","tag-delegue-protection-donnees","tag-dpo","tag-obligation","tag-rgpd"],"yoast_head":"\n