# Designation of the data protection officer 37(4) — GDPR — provision context

> Focused context for a single provision (37(4)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-37#par-4
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Designation of the data protection officer** (GDPR, full article: https://overview.legal/laws/gdpr/art-37).

## Provision text

### 37(4)

In cases other than those referred to in paragraph 1, the controller or processor or associations and other bodies representing categories of controllers or processors may or, where required by Union or Member State law shall, designate a data protection officer. The data protection officer may act for such associations and other bodies representing controllers or processors.


## Topics on this provision

- **Processors** — https://overview.legal/topics/processors
  Entities that process data on behalf of controllers
- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro** (guidance) — https://overview.legal/posts/125823

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-37#par-4 · 2026-08-22