What should be taken into account when hiring an external Data Protection Officer for public authorities?

Written by Aylin Stadtsholte on 9. September 2025.

An external Data Protection Officer for public authorities fulfills the same legal tasks as an internal data protection officer—for example, in accordance with Art. 39 GDPR and the provisions of the BDSG or the respective state data protection laws.

However, additional qualifications are required for work in the public sector:

in-depth knowledge of administrative law,
familiarity with the relevant provisions of federal, state, and local law,
as well as extensive experience with official structures, departmental tasks, and specific technical procedures.

Even though public authorities are not usually subject to fines (§ 43 para. 3 BDSG), consistent compliance with data protection requirements is of central importance – for example, to protect the rights of data subjects and to ensure lawful administrative processes.

Note: This information is for general guidance only and does not replace individual legal advice.