Category: Accountability / Governance / Security Management
Customer: Healthcare Distributor of products and services
Working as DPO with this distributor of healthcare products and services with companies across Europe we worked on a project to meet the Article 30 requirements of the GDPR. This was a big project taking well over 6 months. The companies in the group operate as controller and processor across a diverse range of processing activities. One of the more challenging aspects of this project was the processor ROPA as the companies in the group work with hundreds of controller customers. The challenge is not just in documenting the processor ROPA but ensuring that is maintainable in an ever-changing business landscape. The project has driven better understanding of the organisations processing activities and will help to drive compliance going forward particularly in the areas of data transfer and security.
Sign-up to receive news and information from Fort Privacy
Fort Privacy processes your personal data in order to respond to your query and provide you with information about our products and services. Please see our Data Protection Statement for further information
Data Protection Programmes are all the rage these days. It’s great to see the compliance conversation moving in this direction. As a Data Protection Officer (DPO), I know the difference between working with a solid data protection programme and working with none and all.
Supplier due diligence is one of those exercises we think we will get around to eventually. Here’s a real story that illustrates how a supplier can let you down.
