(Data Protection News & Services)
Under the European General Data Protection Regulation (GDPR), organisations processing personal data must maintain a record of their processing activities unless an exemption applies. However, the type of information to provide in this record differ depending on whether they act as
Under the General Gata Protection Regulation (GDPR), controllers must now now: Keep a record of their processing activities (see here for more details); and Carry out a Data Protection Impact Assessment (DPIA) where the data processing is likely to result in
In its decision of December 21, 2016 (Joined Cases C-203/15 and C-698/15) the Court of Justice of the European Union (CJEU) ruled that national legislation may not provide for general and indiscriminate retention of all traffic and location data of