Legal review of GDPR documentation

Answer:

All the documents in the EU GDPR Toolkit https://advisera.com/eugdpracademy/eu-gdpr-documentation-toolkit/ are designed not to be in conflict with EU Member State laws so from this perspective there in no risk.

However, there are certain areas where you would need to turn to local laws, for example in terms of retention periods there are maybe some specific requirements that will require you to keep certain record that may contain personal data for a specific period of time. For example, CCTV footage can be kept no longer than 30 days in certain jurisdiction such as Romania, Poland and Greece. So, my advice is once you have established your Data Retention Schedule to cross check with the local legal requirements.

Another aspect that may differ relates to Labor Law, in certain jurisdiction such as Germany certain processing activities involving employees personal data need to be brought to the at tention of the Work Counsels/Workers Union.

Also, keep an eye on local EU GDPR implementation acts that can add some local flavors to certain topics.

To learn more about the EU GDPR and its applicability in EU Member States see this free online training GRPR Foundations Course https://advisera.com/training/eu-gdpr-foundations-course//