by jm | Mar 31, 2026 | GDPR and iGDPR guides for practitioners and beginners
GDPR risk assessment is one of those obligations that exists in the documentation of almost every organisation — but in practice tends to be performed once, without updates and without any real connection to actual data processing activities. The result is a document...
by jm | Mar 31, 2026 | GDPR and iGDPR guides for practitioners and beginners
The record of processing activities is one of the first documents requested during a supervisory authority inspection. In theory, the obligation flows directly from Article 30 GDPR — in practice, many organisations maintain it in a way that falls short of...
