Privacy and data protection officer