GDPR · pillar 6 of 6
Accountability
You must be able to demonstrate compliance — records, assessments, and sometimes an officer.
- 16 Records of processing Controllers and processors must keep records of processing activities — purposes, categories of data and recipients…
- 17 When a DPIA is mandatory A data protection impact assessment is required where processing is likely to result in a high risk — and always for…
- 18 When you need a DPO A data protection officer is mandatory for public authorities, for core activities involving regular and systematic…
Start this pillar See the whole map
Read against Regulation (EU) 2016/679 (GDPR), Court of Justice of the EU, Case C-311/18 (Schrems II), 16 July 2020 on . Regulations and frameworks change; the date is there so you can tell whether this has kept up.