EVERYONE MUST APPOINT A DATA PROTECTION OFFICER