Handbook for Data Protection Officers and any employee who deals with the processing of personal data
The new European General Data Protection Regulation (GDPR), which will be fully effective from May 2018, imposes a completely new obligation on many organisations to create a Data Protection Officer position and fill it with a sufficiently qualified person.
Last but not least, measures such as: contract with processors, processing consents, filing and shredding rules and a number of other directives. However, you don't have to make it up fancy. For professional and proven sample GDPR documentation, click here.
This obligation primarily applies to private organisations that process personal data on a larger scale, use profiling or behavioural analysis tools for their clients or process sensitive data. The Handbook is a useful tool for both the Data Protection Officer and any employee who deals with, sets and monitors the processing of personal data.
In practical language, it describes the basic rules arising from the GDPR, highlights important related decisions of supervisory authorities and courts, and other legislation that may come into play.
The handbook also provides guidance on how to comply with other new obligations brought by the GDPR, whether it is the obligation to keep records of personal data processing, conduct impact analysis or inform the supervisory authority about security incidents. Last but not least, it deals with what should be the position of the fiduciary and what all should or could fall under his/her agenda in order to perform his/her function effectively and consistently and thus protect the entire organization from GDPR violations.