Can the DPO deliver employee training within a company?

ANSWER

Yes, the Data Protection Officer (DPO) may deliver training within an organisation. This is one of the functions they may perform as part of their educational and advisory role. Article 39(1)(b) GDPR provides that the DPO's tasks include, among other things, monitoring compliance with the GDPR and training staff involved in processing operations. However, the DPO does not have to deliver training personally — they may also advise on its organisation, oversee its scope, and support the controller in selecting topics or trainers.