When Is a DPO Required Under GDPR and UK GDPR?