Amendment LIBE #2045

Article 33 – Paragraph 3

3. The assessment shall contain at least a general description of the envisaged processing operations, an assessment of the risks have regard to the rights and freedoms of data subjects, the measures envisaged to address the risks, safeguards, security measures and mechanisms to ensure the protection of entire lifecycle management of personal data and to demonstrate compliance with this Regulation, taking into account the rights and legitimate interests of data subjects and other persons concerned. (b) a detailed breakdown of the contexts of the processing pursuant to Article 5a(1) to (8); (c) a list of the purposes of the processing and the legitimate interests pursued by the controller; (d) an assessment of the risks to the rights and freedoms of data subjects pursuant to Article 5b(1) to (10); (e) from collection to processing to deletion. It shall contain: (a) a description of categories of data subjects and of the categories of personal data relating to them; (f) a general indication of the time limits for erasure of the different categories of data; (g) a comprehensive data inventory, describing which category of data is stored where and how, and why the storage of the data is crucial to the end- user feature; (h) an explanation which data protection by design and default practices pursuant to Article 23 have been implemented; (i) a list of the recipients or categories of recipients of the personal data, including the controllers to whom personal data are disclosed for the legitimate interest pursued by them; (j) where applicable, a list of the foreseen transfers of data to a third country or an international organisation, including the identification of that third country or international organisation and, in case of transfers referred to in point (h) of Article 44(1), the documentation of appropriate safeguards; (k) the measures envisaged to address the risks, safeguards, security measures and mechanisms to ensure the protection of personal data and to demonstrate compliance with this Regulation, taking into account the rights and legitimate interests of data subjects and other personsthe envisaged processing operations; concerned.

Current Data Privacy Rating is : stronger    Alexander Alvaro Germany ALDE


comments powered by Disqus