The data protection contact person

The LPrD revision creates the data protection contact person role within each Vaud public entity. This person advises the entity, ensures obligations are met, and serves as the point of contact for data protection matters.

Their responsibilities cover maintaining the processing activities register, supporting impact assessments, raising staff awareness, and handling data subject requests. The role can be held internally or delegated through an external mandate. For a small municipality, an external mandate delivers the required expertise and independence without creating a full-time position.