Your Data Protection Representative has a legal obligation to hold a copy of your Article 30 record of processing activities: i.e. all relevant and up-to-date information regarding the EU and/or UK personal data that you process. Your Article 30 record of processing...
Requests for information from individuals in the EU and/or in the UK must be replied to within one month. Extensions of an additional 2 months are possible depending on the complexity and the number of requests.
A data breach isn’t fun, but it can sometimes happen. Given that every data protection authority (DPA) has different requirements for data breach notifications (including filing in the country’s official language), the entire process can be very challenging –...
Information must be provided in a concise, transparent, intelligible and easily accessible form. Particular attention must be given to information which is addressed to children. The information must be provided in writing or by electronic means and it can also be...
Requests for information from individuals in the EU and/or in the UK must be replied to within one month. Extensions of an additional 2 months are possible depending on the complexity and the number of requests.