Appointment of a collegiate body as Data Protection Officer