The Belgian Data Protection Authority recently published a template that can be used by organisations for meeting their obligation to keep a record of processing activities.
The determination of the data retention periods applicable to the different categories of processed personal data is a difficult quiz to solve under the GDPR.
Access by employees to customers' data has to be subject to stringent privacy restrictions and limitations according to a decision of the Italian data protection authority.
Interesting issues arose from the privacy related discussions at the Summer Legal Conference with major thought leaders on the GDPR obligations and their impact on businesses.
A decision of the Italian privacy authority on the illegal collection of data on criminal convictions of employees raised the issue on a practice that is quite common.
How to get ready for the GDPR right now? This was the topic of the seminar arranged to celebrate the one year deadline from the effective date of the EU Privacy Regulation.