https://community.isc2.org/t5/Privacy/Spanish-data-protection-guidance-should-help-with-GDPR/m-p/8503#M403 <P><SPAN>La Agencia Española de Protección de Datos (AEPD)&nbsp;recently published guidance for organisations on&nbsp;</SPAN><A href="https://www.agpd.es/portalwebAGPD/canaldocumentacion/publicaciones/common/Guias/2018/AnalisisDeRiesgosRGPD.pdf" target="_blank">how to assess the risks involved in personal data processing operations</A><SPAN>&nbsp;(42-page / 8.89MB PDF). It also updated existing guidance on&nbsp;</SPAN><A href="https://www.agpd.es/portalwebAGPD/canaldocumentacion/publicaciones/common/Guias/2018/Guia_EvaluacionesImpacto.pdf" target="_blank">conducting data protection impact assessments (DPIAs)</A><SPAN>&nbsp;(66-page / 9.47MB PDF).</SPAN></P><P>&nbsp;</P><P><SPAN>The Spanish authority recommends the registry of processing operations as starting point for the risk assessment and includes a number of templates to carry out the risk assessment procedure, including questions on the type of data processed, and the purpose of the processing. The guide also includes a template to assess the life circle of the personal data from the moment the personal data is collected to the moment the personal data is destroyed</SPAN></P> Mon, 09 Oct 2023 08:43:43 GMT leroux 2023-10-09T08:43:43Z https://community.isc2.org/t5/Privacy/Spanish-data-protection-guidance-should-help-with-GDPR/m-p/8503#M403 <P><SPAN>La Agencia Española de Protección de Datos (AEPD)&nbsp;recently published guidance for organisations on&nbsp;</SPAN><A href="https://www.agpd.es/portalwebAGPD/canaldocumentacion/publicaciones/common/Guias/2018/AnalisisDeRiesgosRGPD.pdf" target="_blank">how to assess the risks involved in personal data processing operations</A><SPAN>&nbsp;(42-page / 8.89MB PDF). It also updated existing guidance on&nbsp;</SPAN><A href="https://www.agpd.es/portalwebAGPD/canaldocumentacion/publicaciones/common/Guias/2018/Guia_EvaluacionesImpacto.pdf" target="_blank">conducting data protection impact assessments (DPIAs)</A><SPAN>&nbsp;(66-page / 9.47MB PDF).</SPAN></P><P>&nbsp;</P><P><SPAN>The Spanish authority recommends the registry of processing operations as starting point for the risk assessment and includes a number of templates to carry out the risk assessment procedure, including questions on the type of data processed, and the purpose of the processing. The guide also includes a template to assess the life circle of the personal data from the moment the personal data is collected to the moment the personal data is destroyed</SPAN></P> Mon, 09 Oct 2023 08:43:43 GMT https://community.isc2.org/t5/Privacy/Spanish-data-protection-guidance-should-help-with-GDPR/m-p/8503#M403 leroux 2023-10-09T08:43:43Z