Responsibility and compliance

Hihiva

Companies that are subject to the GDPR will be more responsible for how they handle customers' personal information. This directive may include the inclusion of data protection policies, data protection impact assessments and the existence of relevant documents on how data is processed.

In accordance with the GDPR, "destruction, loss, modification, unauthorized disclosure or access to people's data" must be reported urgently, within a maximum of 72 hours, to the data protection regulatory authority, more precisely to the australia mobile phone number National Authority for the Supervision of Personal Data Processing, otherwise this incident could have a negative impact on all those involved, possibly financial losses, breaches of confidentiality, damage to reputation and many others.



For companies with more than 250 employees, it is necessary to have documentation regarding the reason for which the collected and processed information is informed, the descriptions of the information held, the retention period and the description of the technical security measures in force.

In addition, companies that have a regular and systematic monitoring of people on a large scale or process a lot of sensitive personal data must hire a data protection officer (DPO). For many organizations subject to the GDPR, this may mean the need to hire a new member of staff, although larger companies and public authorities may already have people in this role. So that the person who will hold this position will be the contact person between the company and the National Authority for the Supervision of the Processing of Personal Data and will have to report to the members of the management staff, monitor compliance with the GDPR and at the same time be a point of contact for employees and customers.