GDPR: Which of the following statements about the Data Protection Officer $($DPO$)$ are true? Tick the correct answers.

The DPO only reports to the highest management level.

The designation of a DPO is mandatory if the core activities of the controller or the processor consist of processing operations which, by virtue of their nature, their scope and$/$or their purposes, require regular and systematic monitoring of data subjects on a large scale.

The DPO monitors compliance with data protection law.

The DPO must follow any orders from the management in connection with his duties.