Content library
Digital security overview
55: Henkilötietojen käsittelyn oikeusperusteiden tunnistaminen

How to fill the requirement

Digital security overview

55: Henkilötietojen käsittelyn oikeusperusteiden tunnistaminen

Task name
Priority
Status
Theme
Policy
Other requirements
Documentation of personal data processing purposes for data stores
Critical
High
Normal
Low
Fully done
Mostly done
Partly done
Not done
Privacy
Processing principles and accountability
requirements

Task is fulfilling also these other security requirements

6. Lawfulness of processing
GDPR
18.1.4: Privacy and protection of personally identifiable information
ISO27 Full
30. Records of processing activities
GDPR
A.7.2.2: Identify lawful basis
ISO 27701
A.7.2.8: Records related to processing PII
ISO 27701
1. Task description

Processing of personal data is only lawful if one of the legal bases set out in the General Data Protection Regulation is met. The organization must be able to communicate the purpose of the processing and the legal basis to the data subject and, where appropriate, to the supervisory authority.

The documentation shall include at least:

  • the legal basis for the processing and the necessary additional information
  • the parties to whom the processing has been outsourced
  • related data sets
No items found.