Articles
Articles on everyday data protection
For when one answer isn't enough: structured pieces with examples and a method.
The record of processing activities: Article 30 fields made simple
What each field of the record of processing activities means and how to fill it in — with one example carried through the whole register, from purpose to transfers.Data retention periods: how to set them and justify them
A method for setting retention periods when the law is silent: from purpose and dispute risk to a written justification, deletion and review.Contracts with service providers: what is most often missing
What a data processing agreement with a service provider must cover, which clauses are most often left out, and how to check the agreements you already have.