Defining the Organization
As a Chief Privacy Officer, you need to define the organization for the GDPR team members to be able to perform their duties.
You need to create:
• legal entities
• departments

It is mandatory to create entities and departments. If you do not, you will not be able to create processing activities.
You may create:
• third parties
• company guidelines
• the DPO organigram