The motivation may well be to reduce costs. But is that not rather short-sighted? A Data Protection Officer (DPO) must be able to demonstrate the necessary professional expertise and qualifications. And who bears liability if something goes wrong? At least one managing director may be held liable – potentially even both.