Your Jurisdiction at a Glance — European Union (GDPR)
General Data Protection Regulation (GDPR)
Authority: The national supervisory authority of each EU/EEA member state; the European Data Protection Board (EDPB) ensures consistent application
- Records of processing activities (Art. 30 GDPR)
- Data breach notification to the authority within 72 hours (Art. 33 GDPR)
- Data protection impact assessment for high-risk processing (Art. 35 GDPR)
- Transfers outside the EU/EEA only with adequacy or appropriate safeguards
- Task 2 of this workshop: document European Union (GDPR) in the data protection scope document, together with sector rules and other countries you operate in
- Workshop 2: governance, roles and the data protection officer
- Workshop 3: records of processing activities
- Workshop 8 and 9: risk assessment and security measures
- Workshop 10: vendors, processors and international transfers
- Workshop 11: data breaches and notification deadlines