Qualifications for a Data Protection Officer (GDPR)