Eine Auskunft per E-Mail bedeutet nicht automatisch Ausweispflicht. Entscheidend sind konkrete Zweifel, vorhandene Authentifizierung und ein verhältnismäßiger Nachweis.
Was passiert mit personenbezogenen Daten, wenn sie im Produktivsystem gelöscht wurden, aber in älteren Backups noch vorhanden sind? Der Beitrag zeigt, wie Unternehmen Löschentscheidungen bei
Version control and audit trails in data protection software ensure that changes, approvals, and decisions remain traceable at all times—promoting greater accountability, auditability, and management confidence.
Sub-processes can structure Group RoPAs when comparable processes are carried out in multiple companies, countries, or locations with local variations. This article shows how master processing, variants, approvals,
A corporate data protection officer requires more than just a formal appointment. What is crucial is a robust operational model with clear responsibilities, resources, reporting structures, audits, and escalation procedures.
Data protection records are only audit-ready if the processing, risk, approval, version, and measures remain traceably linked. Why email, Teams, and drives are often insufficient for this purpose.
Many companies maintain their record of processing activities (RPA) in Excel. This works fine on a day-to-day basis—until the RPA is audited. We explain why Article 30 of the GDPR