Definition
The Privacy Officer (RPRP), sometimes called "DPO" (Data Protection Officer) in the European GDPR culture, is the person designated within an organization to ensure compliance with Law 25.
Main functions: oversee policy application, handle access, rectification, and de-indexing requests, conduct Privacy Impact Assessments (PIA), manage confidentiality incidents (notification to the CAI within legal deadlines), train staff.
Law 25 requirement: their contact details (name, email or contact form) must be publicly posted on the organization's website. At Courteo, the Privacy Officer is reachable via the /rprp page. Every Québec mortgage broker must also designate a Privacy Officer, often the brokerage's principal officer for small structures.