Should the General Counsel ultimately be responsible for GDPR compliance, or is an independent privacy function more appropriate? Spurred by new rules, companies are hiring for the Data Protection Officer position, but it isn’t always easy to find candidates with the right skills.