This position description (PD) is for those golf operations that are required to comply with the new GDPR requirement to staff or designate a Data Protection Officer (DPO). Due to being small businesses, golf operators are not required to establish a new position. This function can be added as a collateral duty to the person currently managing your database or may be outsourced. If outsourced, operators must realize compliance with remains with them.