GDPR inventory · IN SHORT
Work through seven sections to describe the personal data your business uses and the answers still missing. The skill organises your account and prepares questions for a qualified privacy adviser.
Your brief
Our course registrations are in a form system and a shared mailbox. I do not know who still has access. There is no active incident. Use categories only.
Possible draft
Known: form system and mailbox. Unknown: access roles and associated arrangements. Next step: the owner checks roles in both systems. The overview prepares a discussion; it does not establish compliance.
01 / THE FOUNDATION
Seven sections with status codes, missing information, adviser questions and one concrete next step.
02 / SEE HOW IT WORKS
Our course registrations are in a form system and a shared mailbox. I do not know who still has access. There is no active incident. Use categories only.
Known: form system and mailbox. Unknown: access roles and associated arrangements. Next step: the owner checks roles in both systems. The overview prepares a discussion; it does not establish compliance.
This example shows the approach. It is not a client result or a guarantee of a particular outcome.
03 / GET STARTED
Separate a routine inventory from an active incident. Incidents require responsible responders and an appropriate factual summary.
Cover data, lawful basis, storage, access, processors, retention and incident arrangements. Preserve unknowns.
Assign an owner and completion criterion to the next inventory action. Refer legal judgements for qualified review.
04 / MAKE IT YOURS
Take the instructions, add your own context and review the draft. You stay in control.
Full informationDownload. Apply. Refine.
File language: English