Records of processing
Inventory of processing activities, purposes, retention periods, and recipients.
Regulation
GDPR
The GDPR requires organisations to demonstrate effective control over personal data processing, not merely state it.
Key points
Security
Technical measures proportionate to the risk for data subjects.
Breaches
Procedure for breach assessment and notification within statutory deadlines.
A specific need on this topic?
The firm scopes every engagement around your regulatory and operational context.