Data Protection Officer and Management Board decisions