A data protection officer (délégué à la protection des données) needs to be appointed when the data procession is done by:

• a public entity;
• the nature of the data processing because of its nature, purpose or nature require a regular and systematic follow-up; or
• when the data processing is on a large scale for particular data.