：欧盟发布的《一般数据保护条例》对数据保护官的组织定位、设置条件、功能特征、资质要求等做出了明确的规定。《一般数据保护条例》指导下的数据保护官制度，启示着我国企业的组织机构需要对接国际标准、立足本土，从数据保护岗位设置来促进数据保护的合规实践；我国的数据管理人才培养，需要健全培养目标、丰富培养方式、创新培养内容、对接职业场景；有关学科专业需要积极参与到数据保护官的职业标准化和认知体系建设之中。

The EU General Data Protection Regulation presents a new trend of data protection and a new order. In this background, domestic institutions need to improve the mechanism of data protection and to establish data protection personnel. Data Protection Officer (DPO) is a basic setting to promote data protection compliance practice. This paper analyzes the ability and positioning of data protection officers under the guidance of GDPR, as well as ability requirements and qualifications, and provides reference for the setting and training of professional talents.