Data Protection Workshop 3

Records of Processing Activities

Jurisdiction selected: Cyprus — GDPR + Law 125(I)/2018 on the protection of natural persons

After this workshop you have

  • The processing activities of all departments recorded in ResGuard
  • Data, data subjects, recipients and systems documented for each activity
  • A specific purpose and legal basis for every activity, and documented consent processes
  • Retention periods, transfers, owners and a review cycle in place

Agenda — one slide per task

  • 1. Identify processing activities
  • 2. Data categories, data subjects and data flows
  • 3. Purposes and legal basis
  • 4. Consent management
  • 5. Retention periods and transfers
  • 6. RoPA review and maintenance
  • 7. Workshop review and close-out