Home

With the GDPR being fully enforceable on May 25th, more and more questions arise regarding the scope of article 30 GDPR. As you might already know, article 30 GDPR imposes the obligation to maintain records of processing activities by both controllers and processors. In this blog post, we will address if and how small and medium-sized enterprises can comply with article 30 GDPR.

Assume that you just found yourself with a supposedly complete article 30 GDPR register of your processing activities. You did the meticulous work of inventorying the activities, their purposes, the data subject categories and categories of personal data involved, and all the other information required by the article. You sigh deeply and sit back for a moment. Are you ready now?

The short answer to the question whether there is a software solution for GDPR compliance is: no. From a privacy compliance software provider this may come as a surprise. However, PrivacyPerfect is not the kind of provider that believes in magic. Becoming GDPR compliant is mostly hard work. The more comprehensive answer to the above question is: no, there is not a single software product that will automatically ensure you comply with GDPR without any further effort.

1. The key to insight is the overview. Therefore, start with making an inventory of all your processing activities. It might be an investment in time and money, but it’s the magic trick for compliance. Want a little help? Download our whitepaper on data mapping.

On May 25th the General Data Protection Regulation (GDPR) is fully enforceable. The new legislative package replaces the current Directive 95/46 (‘The Data Protection Directive’) and imposes new European rules regarding data protection. Amongst other things, the GDPR sets stringent penalties for non-compliance with the new rules.