Data protection
Your GDPR registers, with every deadline in view
Keep the record of processing activities, handle data subject requests within one month and log every personal data breach with the 72-hour deadline. The registers are for owners and admins only.
How it works
Record processing
Purpose, legal basis, data and people concerned, recipients, transfers, retention and security measures.
Answer requests
Record the right exercised; the deadline is one month, or three with the extension.
Log breaches
Record what happened and the risk to people; with a risk, the authority must hear within 72 hours.
What changes for you
Deadlines handled for you
Month ends are handled, overdue requests are marked and reminders come before the breach deadline.
NIS2 and GDPR together
Link a breach to the security incident when both reports can be due.
No personal data in logs
The audit log records only the register and number.
What it covers
- GDPR Art. 30
- GDPR Art. 12-22
- GDPR Art. 33-34
Works together with
Questions
Who can open the registers?
Only owners and admins, because the registers contain personal data.
Must I log breaches I do not report?
Yes. Every personal data breach is logged (Art. 33(5)); write down why you do not report it.
Set up your registers
Start with HR, customers and your website.