Companies may need to appoint a data protection officer (DPO) when core activities involve processing personal data on a large scale. The sector may alone suggest whether that is the case.

Illustratively, DPOs are often required in the IT, hospital, security, or recruitment sector. Other sectors are also affected. This includes the airline sector, where IATA and ERA recommend a DPO.