A. To provide resources necessary to carry out the defined tasks of the data protection officer and to maintain his or her expert knowledge.

B. To submit for approval to the data protection officer a code of conduct to govern organizational practices and demonstrate compliance with data protection principles.

C. To ensure that the data protection officer receives sufficient instructions regarding the exercise of his or her defined tasks.

D. To ensure that the data protection officer acts as the sole point of contact for individuals' questions about their personal data.