Guest user Created: Apr 21, 2018 Last commented: Apr 21, 2018

Appendix for Inventory of Processing Activities

When preparing the Appendix for Inventory of Processing Activities, the categories of personal data should be attribute specific such as name, phone number, address etc ….. or can it be just categorized as personal data or sensitive personal data without listing each attribute being processed?

0 0

Assign topic to the user

Select user

Expert

Andrei Hanganu Apr 21, 2018

Answer:

EU GDPR art. 30 “Records of processing activities” https://advisera.com/eugdpracademy/gdpr/records-of-processing-activities/ states that you need to provide a “of data subjects and of the categories of personal data” which suggest that a certain amount of granularity is required and sensitive and non-sensitive would not be enough.

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

Apr 21, 2018

Expert Advice Community