The role of the data protection officer is one of the most controversial changes introduced by the EU Privacy Regulation. What liabilities and obligations are on him?