Hard law and soft law on data protection: What a DPO should know to better perform his or her tasks.