In accordance with the accountability principle (Art. 5(2) GDPR), controllers must be able to demonstrate compliance with data protection principles. A central tool for this is the Record of Processing Activities (“ROPA”) under Art. 30 GDPR. Furthermore, the obligation to provide proof requires comprehensive documentation of other measures, such as technical and organisational measures, completed Data Protection Impact Assessments, or the collection of consent.

As your external data protection officer, we provide crucial support in fulfilling your documentation and accountability obligations.

We assist you in the methodical creation and structuring of your Record of Processing Activities (“ROPA”) and review existing records for conformity.

In light of changing processes, we advise you on the continuous adaptation of your entire data protection documentation, so that you can meet your accountability obligations at all times and minimise risks from outdated documents.