The Directive 95/46/EC gave European Union member states the possibility to introduce into their national law the appointment of a Data Protection Officer (DPO), but it is still optional. Today, the European Commission’s draft reforming the EU framework on Data Protection Regulation sets forward in art. 35 that the DPO role will be mandatory for personal data processing that affects large amounts of individuals (≥ 5000 data subjects in 12 months), location data or children´s data in large scale filing systems.