Germany: Can Employers Appoint In-House Counsel as Data Protection Officers?

Under the European General Data Protection Regulation (GDPR), which will start to apply May 25, 2018, many companies will be required to appoint a Data Protection Officer (DPO). Who should it be?
Source: New feed 2