DPO and GDPR

How to determine if an organization must appoint a DPO?

The obligation to appoint a Data Protection Officer arises in three cases under Article 37(1) of the GDPR. None of the conditions refer to the size of the organization — the nature of the activity and the scale of processing are decisive.