Data Protection Officer
A DPO is someone an organization designates to facilitate compliance with the
provisions of the GDPR.
Not every organization needs a DPO. In general, DPOs are necessary for
organizations that handle end-user data at "large scale". SOVA can't offer
specific advice as to whether your organization is legally required to have a
DPO.
For more information on DPOs and when it's necessary to designate one, see Article 37 of the GDPR.
EU Representative
An EU Representative is someone an organization not established in the EU
designates to represent that organization with regard to their obligations under
the GDPR.
Again, only certain organizations need an EU Representative. In general, EU
Representatives are necessary for organizations based outside the EU that
are subject to the requirements of the GDPR. SOVA can't offer specific
advice as to whether your organization is legally required to have an EU
Representative.
For more information on EU Representative and when it's necessary to designate one, see Article 27 of the GDPR.