Mentioned activities should

A procedure may provide for rules for their transfer securing Termination of cooperation with the processor If cooperation with the processor is terminated in accordance with the GDPR the processor is obliged to delete or return personal data depending on the administrator s choice and to delete all copies thereof Due to the principle of accountability these activities should be documented e g with a report on their implementation.

The document confirming the above  contain Phone Number List information about who when on what basis and how performed specific activities destruction or return of data We should keep such a document as evidence of the processor s fulfillment of its obligations related to the completion of entrusting the processing of personal data g sent should be ensured Failure to report a breach and failure to notify people about the incident review of penalties by the President of the Office for Personal Data Protection Karolina Żebrowska January CATEGORIES.



Decisions and judgments IOD iWarsztatIOD Penalties Penalties from supervisory authorities Data protection GDPR Personal Data Protection Office The obligation to report a violation to the supervisory authority results directly from Art GDPR Pursuant to the above mentioned provision in the event of a breach of personal data protection the controller shall report it without undue delay if possible no later than hours after discovering the breach to the supervisory authority competent in accordance with Art unless the breach is unlikely to result in a risk of violating the rights.