LIVE VIRTUAL TRAININGS
Learn in small groups from top experts and real-life examples

Expert Advice Community

Guest

Appendix for Inventory of Processing Activities

  Quote
Guest
Guest user Created:   Apr 21, 2018 Last commented:   Apr 21, 2018

Appendix for Inventory of Processing Activities

When preparing the Appendix for Inventory of Processing Activities, the categories of personal data should be attribute specific such as name, phone number, address etc ….. or can it be just categorized as personal data or sensitive personal data without listing each attribute being processed?
0 0

Assign topic to the user

EU GDPR & ISO 27001 INTEGRATED DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR & ISO 27001 INTEGRATED DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Andrei Hanganu Apr 21, 2018

Answer:

EU GDPR art. 30 “Records of processing activities” https://advisera.com/eugdpracademy/gdpr/records-of-processing-activities/ states that you need to provide a “of data subjects and of the categories of personal data” which suggest that a certain amount of granularity is required and sensitive and non-sensitive would not be enough.
Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Apr 21, 2018

Apr 21, 2018