The Belgian Data Protection Authority recently published a template that can be used by organisations for meeting their obligation to keep a record of processing activities.
The determination of the data retention periods applicable to the different categories of processed personal data is a difficult quiz to solve under the GDPR.
The IoT unveils the potential of data, but regulatory bounderies cannot be ignored. This is my message as part of SAP's Insights on the Future of the Internet of Things.
Access by employees to customers' data has to be subject to stringent privacy restrictions and limitations according to a decision of the Italian data protection authority.
Interesting issues arose from the privacy related discussions at the Summer Legal Conference with major thought leaders on the GDPR obligations and their impact on businesses.
