Hvad medfører GDPR-reglerne for min organisation?
How does the GDPR impact my organization?
GDPR-reglerne dækker over en lang række forpligtelser. Herunder nævnes blot nogle af de væsentligste.
Din organisation skal kunne dokumentere, at alle behandlingsaktiviteter sker på et lovligt grundlag.
Din organisation skal føre fortegnelser over alle behandlingsaktiviteter.
Din organisation skal sikre – og kunne dokumentere – at alle de personer, hvis personoplysninger I behandler, er blevet oplyst om, hvordan I behandler oplysningerne og til hvilke formål.
Din organisation skal kunne dokumentere, hvilke tekniske og organisatoriske foranstaltninger I har implementeret for at sikre et passende niveau for behandlingssikkerheden.
Din organisation skal kunne dokumentere, at der sker auditering af anvendte databehandlere for at sikre, at de også er i stand til at understøtte jeres efterlevelse af databeskyttelsesreglerne.
The GDPR covers a wide range of obligations. Below are just a few of the essential aspects:
Your organization must be able to document that all its processing of data is done in a legal manner.
Your organization must keep a record of all its processing activities.
Your organization must ensure - and be able to document - that people, whose personal data you are processing, have been informed about what you process and how you do it.
Your organization must be able to document what technical and organizational measures you have taken to ensure an appropriate level of privacy safety.
Your organization should be able to document that data processors are audited to ensure that they support your compliance with the regulation.
‍