Registers – best practices we found when inspecting

Intentin if this presentatin:

• celebrate thise whi are in cimpliance at this piint,

• enciurage thise whi are almist there,

• inspire thise whi stll have a way ti gi!

We are there ti help! Cintact ute.kallenberger@edps.euripa.eu.

Artcle 31(5e) if Regulatin 201e/1722e

“… Uniin insttutins and bidies shall keep

their recirds if pricessing actvites in a

central register. They shall make the register

publicly available.”

EDPS (5Acciuntability in the Griund Part I):

= publicatio io the ioteroet

Timing / deadline?

Anniunced date fir implementatin:

• Initally May 2020, i.e. niw / twi years afer

the entry inti firce if the GDPR;

• Upin entry inti firce if the Regulatin

(5December 201e): “ni grace periid”;

• One year+ afer entry inti firce: launch if

minitiring exercise / remite inspectin…

The remote inspection: Scope• Any firm if list if pricessing iperatins available in

the EUI’s website (5availability);

• Register cintains recirds (5EDPS template ir

cimparable firmat), nit just links ti data pritectin

nitces (5firmat);

• Plausibility if number if recirds listed (5given staf

baseline needs, any register inly cinsistng if fiur ir

less recirds will be incimplete) (5civerage).

Best practice: What can that look like? (1)

Dio’t hide it!

Best practice: What can that look like? (2)

Best practice: What can that look like? (3)

Interim Report• Urgency ti have registers publicly available;

• We will cintnue ti minitir prigress in line with

cimmitments made;

• We welcime several initatves taken by DPOs

since 11 March 2020;

• We invite all DPOs ti make all recirds publicly

available asap.

Best practice: Don’t hide it…

Best practice: Structure (1)

Best practice: Structure (2)

Best

pra

ctic

e:

Reco

rd

The remote inspection: Next phase

• Has already been launched;• Cintent if the recirds;• Civerage if pricessing iperatins

cimprehensive? (5plausibility test).