The What, Who, How and When to report to top management as a DPO

Under the GDPR, Data Protection Officers (DPO) shall directly report to the highest management level of the companies they support.

This often triggers questions such as who should be involved, what is the most relevant level of management to report to, what should be covered, when the reporting should take place, etc.