# Position of the data protection officer 38(2) — GDPR — provision context

> Focused context for a single provision (38(2)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-38#par-2
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Position of the data protection officer** (GDPR, full article: https://overview.legal/laws/gdpr/art-38).

## Provision text

### 38(2)

The controller and processor shall support the data protection officer in performing the tasks referred to in Article 39 by providing resources necessary to carry out those tasks and access to personal data and processing operations, and to maintain his or her expert knowledge.


## Topics on this provision

- **Processors** — https://overview.legal/topics/processors
  Entities that process data on behalf of controllers
- **Right of Access** — https://overview.legal/topics/inzagerecht
  Data subject right to access their personal data
- **Supervisory Authorities** — https://overview.legal/topics/supervisory-authorities
  National data protection authorities and their powers
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **Judgment of the Court (Grand Chamber), 8 April 2014.#European Commission v Hungary.#Failure of a Member State to fulfil obligations — Directive 95/46/EC — Protection of individuals with regard to the processing of personal data and the free movement of such data — Article 28(1) — National supervisory authorities — Independence — National legislation prematurely bringing to an end the term served by the supervisory authority — Creation of a new supervisory authority and appointment of another per** (case-law) — https://overview.legal/posts/132371
- **Judgment of the Court (Grand Chamber), 8 April 2014.#European Commission v Hungary.#Failure of a Member State to fulfil obligations — Directive 95/46/EC — Protection of individuals with regard to the processing of personal data and the free movement of such data — Article 28(1) — National supervisory authorities — Independence — National legislation prematurely bringing to an end the term served by the supervisory authority — Creation of a new supervisory authority and appointment of another per** ¶13 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132371
- **Opinion 3/2025 on the draft decision of the French Supervisory Authority (FR SA) regarding the “Lexing GDPR certification criteria”** (guidance) — https://overview.legal/posts/50756
- **Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH** (guidance) — https://overview.legal/posts/51079
- **EDPB-EDPS Joint Opinion 04/2022 on the Proposal for a Regulation of the European Parliament and of the Council laying down rules to prevent and combat child sexual abuse** (guidance) — https://overview.legal/posts/125917
- **EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space** (guidance) — https://overview.legal/posts/125922
- **EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space** §3 (guidance, EDPB) — https://overview.legal/posts/125922
- **EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space** §95 (guidance, EDPB) — https://overview.legal/posts/125922
- **EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space** §33 (guidance, EDPB) — https://overview.legal/posts/125922

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-38#par-2 · 2026-08-22