Guest user Created: May 25, 2018 Last commented: May 25, 2018

Internal record of processing

I am trying to figure out if the organisation I am working for needs to maintain a record of processing (article 30), and if so, to get a better idea of what this record will look like. We are a small e-business selling good and software online. We are based in Israel, but do sell to customers within the EU. Any help is greatly appreciated.

0 0

Assign topic to the user

Select user

Expert

Andrei Hanganu May 25, 2018

Answer:

The “Inventory of Processing Activities” is mandatory if (a) the company has more than 250 employees; or (b) the processing the company carries out is likely to result in a risk to the rights and freedoms of data subjects; or (c) the processing is not occasional; or (d) the processing includes special categories of data (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation);or (e) the processing includes personal data relating to criminal convictions and offences.

To learn more about the EU GDPR check out our free “EU GDPR Foundations Course” https://advisera.com/training/eu-gdpr-foundations-course//

Quote

0 0

Comment as guest or Sign in

HTML tags are not allowed

Name *

Email *

I accept the Privacy and Terms

Notify me when someone replies

May 25, 2018

Expert Advice Community