Fragen & Antworten
Do I have to keep a record of processing activities according to the regulations of the GDPR?
According to the GDPR, notifying the data processing register (DVR) is no longer necessary. However, for the compliance with the regulation this now stipulates keeping a register regarding data processing for companies with more than 250 employees. For companies with less than 250 members, the documentation obligation only applies if
- The data processing represents a risk for the rights and liberties of the affected people.
- The processing does not only occur occasionally
- The processing contains sensitive data resp. data on criminal convictions
Violations of the documentation obligations can result in penalties of up to 10 million EUR or 2% of last year´s world-wide annual turnover.