Observe
Identify personal data processing activities, information flows, purposes and the parties involved.
Speak to a specialistA structured assessment of personal data processing: purposes, legal bases, procedures, responsibilities and the exercise of data subjects’ rights.
Discuss RCAThe scope of work is defined according to the organisation’s activities, risks and needs.
Identify personal data processing activities, information flows, purposes and the parties involved.
Connect purposes, legal bases, procedures and responsibilities with the applicable requirements and data subjects’ rights.
Establish priorities for organising personal data processing and guiding the measures to be adopted.
Yes. The analysis of personal data processing includes the procedures and systems used and the information security measures, within the agreed scope.
Yes. The assessment can focus on particular activities, processes or needs. Where relevant, the agreed scope may include a compliance and maturity audit.