11.1 Organisational Structure
| Role | Responsibility | Contact |
|---|---|---|
| Data Controller | Overall data protection responsibility | privacy@dmr-group.org |
| Data Protection Officer | GDPR compliance and oversight | dpo@dmr-group.org |
| Security Lead | Information security and incident response | security@dmr-group.org |
| Privacy Lead | Privacy policy and user rights | privacy@dmr-group.org |
| Compliance Lead | Regulatory compliance and audits | compliance@dmr-group.org |
| Beta Program Manager | Beta testing and user feedback | beta@dmr-group.org |
11.2 Data Protection Officer (DPO)
The DPO monitors GDPR compliance, advises on data protection obligations, cooperates with supervisory authorities, handles data subject requests, and conducts privacy impact assessments. Contact: dpo@dmr-group.org or info@dmr-group.org.
11.3 Security Lead
The Security Lead implements security controls, conducts vulnerability assessments, manages incident response, oversees security training, and maintains documentation. Contact: security@dmr-group.org or info@dmr-group.org.
11.4 Privacy Lead
The Privacy Lead develops privacy policies, manages user privacy requests, ensures privacy by design, conducts training, and maintains documentation. Contact: privacy@dmr-group.org or info@dmr-group.org.
11.5 Compliance Lead
The Compliance Lead ensures regulatory compliance, conducts audits, manages documentation, coordinates with authorities, and maintains the compliance calendar. Contact: compliance@dmr-group.org or info@dmr-group.org.
11.6 Beta Program Manager
The Beta Program Manager recruits and manages beta testers, collects and analyses feedback, manages releases, communicates with testers, and coordinates with the product team. Contact: beta@dmr-group.org or info@dmr-group.org.
11.7 Training & Awareness
- Annual data protection training.
- Security awareness training.
- Privacy by design training.
- Incident response training.
- Regulatory compliance training.
11.8 Accountability & Audit
We carry out regular compliance audits, annual security assessments, quarterly privacy reviews, incident post-mortems, and continuous improvement.
11.9 Escalation Procedure
- Level 1: Team Lead (24 hours).
- Level 2: Department Head (4 hours).
- Level 3: Executive (1 hour).
- Level 4: Data Controller (immediate).