Creating and maintaining a register of personal data processing activities (hereinafter – Register) is not voluntary – this obligation is determined by Article 30 of the General Data Protection Regulation (hereinafter – GDPR) (there are exceptions). However, should the value of the Register end with the fulfillment of the GDPR requirement, or can it serve as a practical starting point for broader personal data management in the organization?
Survey conducted by: Agnese Gusarova
In case of questions or comments, you can contact me on LinkedIn:
https://www.linkedin.com/in/agnese-gusarova-892025100