Obligations when processing personal data

Applying the principles of data protection

Identifying the legal basis that allows the processing

Informing and being transparent

Attending to and facilitating the exercise one’s rights to information-based self-determination

Appointing and communicating a data protection officer

Applying data protection by design and by default

Analysing the risks to rights and freedoms

Preparing an impact assessment related to data protection

Analysing risks and applying security measures

Notifying personal data security breaches

Regulating the relationship between the data controller and the data processor

Registering and publishing processing activities