1. What could be better - municipality be as one controller for all local selfgovernment including all subdivisions, departments, schools, etc? Or, it would be more reasonable to define each separately as controller? In some cases, the school could be as controller, and some departments of local council work as processors
GDPR obligation in case of occasional service
I deal with consulting in the field of personal growth but I closed the VAT number in May 2018, before the entry into force of the European GDPR legislation. Now I find myself sporadically issuing occasional service receipts to private customers for the same services. In this case, however, is there an obligation to adapt to the legislation in question? the name and surname and the type of service appear on the receipt.
Data Controler VS Data Processor in cloud services
1. I have billing software that is deployed on cloud.as a SaaS supplier do i become data processor?
Anonymous data
If we have a software development partner in another country, who has only access to anonymized database for software development and testing. Do we still have to sign "Controller to Processor" agreement and also mention him as a subcontractor in the GDPR agreement with our EU customers?
Privacy Laws outside EU
it will be helpful to send me this list of Privacy Laws other than EU Countries so that I will get more updated on various other countries Privacy laws..
Subject to GDPR
Does ISP or mobile operator in Brunei subject to GDPR? As they have subscribers that originates from EU countries.
GDPR data controller or processor
My company is a product based company that provides billing software to different companies who want to bill their customers. Along with the software we also provide maintenance service to the companies whom we sell our product. We have access to the customer data (stored by the companies who uses our software) as well. So can you please tell me whether my company is data controller or data processor?
Law enforcement agencies
If a company is selling access to an application that allows law enforcement to make a search on an application to view fraud data. Under UK law and EU Privacy law, I bet that they have the power to access these information. But, in this case, from the perspective of obligations of transparency with the clients whose customer data that the company collect , the customers should be informed that the company grant the access to their personal data in the privacy notice?
GDPR compliance
1. Is the GDPR in your opinion the most stringent compliance requirement?
IT Decommissioning policy
I would like a rationale with examples why I need an IT Decommissioning Policy.