Legally compliant data protection management with a system

Implementation of the GDPR

• Accountability - what does this mean?
• Data protection management system (DSMS) - how should it be structured?

Responsibilities in data privacy

• The data protection officer - appointment and tasks.
• The information security officer.
• Involvement of the works council.

Data protection organization

• Company policy data privacy.
• Commitment to data secrecy.
• Data protection training.
• Documentation and evaluation of data processing.
• Implementation of effectiveness checks.
• data privacy and consultation.
• Procedures for responding to regulators.

Individual obligations

• Legal basis for data processing.
• Order processing.
• Internal reporting obligation in the event of data protection breaches.
• Rights of the data subject.
• Authorization concepts.
• Deletion concept.
• Data transfer to third countries.

Samples and templates for a DSMS  

• Model list of processing activities.
• Documentation templates to ensure technical and organizational data security.
• Model directive on the protection of personal data.
• Model commitment to data secrecy.
• Carrying out a data privacy.
• Sample contract for order processing.
• Documentation on the implementation of controls at service providers.
• Declaration of consent for the publication of employee photos.
• Consent to advertising mailings/newsletters.
• Consent to the storage of applicant data.
• Privacy policy for websites.
• Privacy policy for mobile apps.
• special forms of use of websites.
• etc.