Article 30 of GDPR requires companies to produce records of processing activities (ROPA). According to the ICO, this requires “a formal, documented, and accurate ROPA based on a data mapping exercise that is reviewed regularly”. ROPA reflects the accountability...
Data privacy compliance is not just a matter of complying with the law. It is also about your company’s reputation and competitiveness. A large number of countries have implemented data privacy laws, and more are on the way. There are also revisions to the EU’s...
While all of the Singapore PDPA updates affect all industries, their impact will be even more pronounced for companies that adhere to industry regulations, or for start-ups with limited resources that have not prioritized privacy until now.. Here we provide a PDPA...
Inspired by the GDPR, many nations have begun introducing stricter and more comprehensive data privacy regulations. The Brazil government which implemented the Brazil LGPD data protection law (Lei Geral de Proteção de Dados), translating to General Data Protection...
Introduction What is the GDPR Accountability Principle? The GDPR accountability principle is a core concept that requires organisations to take responsibility for data protection and provide evidence of their compliance efforts. Set out in Article 5(2) of the GDPR,...