I respect his right to do whatever he would like with his own hobby, but we should be clear that the guy is
stating he doesn’t have the resources, based on a series of misunderstandings.
So, for example, he says he is required to appoint a DPO.
The U.K. Information Commissioner has this to say:
>Do we need to appoint a Data Protection Officer?
A> Under the GDPR, you must appoint a DPO if:
> you are a public authority (except for courts acting in their judicial capacity);
> your core activities require large scale, regular and systematic monitoring of individuals (for example, online behaviour tracking);
> * or your core activities consist of large scale processing of special categories of data or data relating to criminal convictions and offences.
So, for example, he says he is required to appoint a DPO.
The U.K. Information Commissioner has this to say:
>Do we need to appoint a Data Protection Officer?
A> Under the GDPR, you must appoint a DPO if:
> you are a public authority (except for courts acting in their judicial capacity);
> your core activities require large scale, regular and systematic monitoring of individuals (for example, online behaviour tracking);
> * or your core activities consist of large scale processing of special categories of data or data relating to criminal convictions and offences.