From ComplyVox
Writing
Data protection in plain English, for the person who was handed it.
-
A supplier sent us a DPA. What now?
A data processing agreement arrived from a supplier. What Article 28 requires it to contain, which parts are worth reading twice, and what signing does not do.
-
How to write your first ROPA
What a record of processing activities is, what Article 30 GDPR requires it to contain, and how to write your first one when you are starting from nothing.
-
Do we need a data protection officer?
GDPR requires a data protection officer in three situations. Here is the Article 37 test, what core activities and large scale mean, and what follows from it.