The DPO may perform other tasks and duties, but:

• A.Only administrative tasks are allowed, per Article 38(6), which allows the DPO to hold other tasks and duties even where those create a conflict of interest, so long as the DPO discloses it
• B.The DPO can hold any position simultaneously, per Article 21(2), which allows objection to direct marketing only if the data subject pays an opt-out fee
• C.The controller must ensure those tasks do not result in a conflict of interest with the DPO role
• D.These must always be related to data protection