Rules on when and how to appoint a Data Protection Officer. May be folded into the amended Implementing Regulation.