Skip to main content
DraftWave 6Owner: TBDReviewers: unassignedLast review: not yet reviewed
Who should read this:Data protection officers

Guide for data protection officers

You check that the system applies data protection by design and by default, and that you can support DPIAs and data subjects’ rights.

Your questions and where to find the answers​

QuestionAnswer
How is each GDPR principle implemented?8.1 Data protection by design and by default
Who is controller or processor for each processing operation?8.2 Controllers, processors and responsibilities
Which personal data are processed where?5. Building block view (level 1)
How are key-coded identifiers managed, and how is re-identification risk controlled?8.7 Key-coded identifiers and data linkage
How are data subjects’ rights applied to datasets already in use?8.9 Dataset versioning
How are breaches detected and notified?6.5 Security incident and personal data breach
What is logged for accountability?8.5 Logging, monitoring and audit
Which inputs are available for a DPIA?8.1 Data protection by design and by default
tip

The box at the top of every page shows which governance sections the page implements. The governance traceability page shows, for every governance section, where it is implemented and what is still missing.