Organizational status of the Data protection officer
The controller and processor shall ensure that the data protection officer does not receive any instructions regarding the exercise of those tasks. He or she shall not be dismissed or penalised by the controller or the processor for performing his tasks. The data protection officer shall directly report to the highest management level of the controller or the processor.
Chapter IV, Section 4, Article 38, Paragraph 3
Regulation's subject matter
Position of the data protection officer (Article 38, Section 4, Chapter IV)