The EU General Data Protection Regulation provides a number of rights to data subjects and obligations to companies using the data. It has an impact on technology solutions and requires state-of-the-art security and mechanisms to ensure privacy. What is less often highlighted is that management is of huge importance, and the most profound impact lies within how you manage your operations. In this piece for The Privacy Advisor, Piotr Foitzik, CIPP/A, CIPP/C, CIPP/E, CIPP/G, CIPP/US, CIPM, CIPT, FIP, explains how process management can help businesses comply with the GDPR and why examining business processes is still useful, even when it is not easy to do.
Full Story