Well, if you're owner and manager, I think you've got the independence, adequately resourced and reporting about right.

If you're a sole proprietor and managing data at volume and sensitivity levels that a DPO is required, I hope you're an expert at protecting that data..