Data protection officers ensure that the processing of personal data in an organisation is compliant with data protection standards and with the obligations set out in the applicable legislation such as GDPR. They elaborate and implement the organisation policy related to data protection, are responsible for data protection impact assessments and handle complaints and requests from third parties and regulatory agencies. Data protection officers lead investigations into potential data breaches, conduct internal audits and act as point of contact within the organisation on any matters related to the processing of personal data. Data protection officers may develop training programmes and provide training to other employees on data protection procedures.