The EU General Data Protection Regulation presents a new trend of data protection and a new order. In this background, domestic institutions need to improve the mechanism of data protection and to establish data protection personnel. Data Protection Officer (DPO) is a basic setting to promote data protection compliance practice. This paper analyzes the ability and positioning of data protection officers under the guidance of GDPR, as well as ability requirements and qualifications, and provides reference for the setting and training of professional talents.