Actualités

Ensuring GDPR compliance

Expiré

Abstract

When a lawyer and an auditor specialising in data protection write a study together on an GDPR compliance programme, the result is creative and inevitably different from what is usually written about GDPR compliance by lawyers or security specialists.

The idea of this deliverable is to have a fresh, practical view, to see things from an internal responsibilities point of view and thus be able to practically help organisations to structure their GDPR compliance. The General Data Protection Regulation is too general a piece of legislation for organisations to easily implement. As organisations structure their activities in processes by specifying the roles and responsibilities of the various stakeholders, this publication has sought to transpose the requirements of the Regulation into processes, accompanied by responsibility matrices, specifying the deliverables generated as a result.

  • Who is responsible for the actions?
  • Who has to take action?
  • Who is going to provide help and advice and who absolutely needs to be informed for the GDPR to finally be implemented effectively and sustainably?
  • And what deliverables should come out of the exercise?
  • These are the questions we have tried to answer..

We found a great deal of literature that explains the GDPR, presents the principles and explains the obligations. We have not yet found a presentation that focuses on the usual roles and responsibilities within organisations

Our work can obviously be improved and we do not guarantee the exhaustiveness of the result. In line with the Plan-Do-Check-Act methodology that we hold dear, we would be delighted to have your constructive feedback to help us complete this study. In the meantime, we hope that our work will be useful to you.

Authors: Florence de Villenfagne and Patrick Soenen

Content of the publication

  1. Purpose and scope
  2. Target audience
  3. Roles and responsibilities
  4. Lines of Defence model
  5. GDPR processes
    1. Governance area
    2. Organisational area
    3. Operational management area
    4. Monitoring and review area

More information

Download the publication available in 3 languages