Additionally as a DPO I would mention other documents that are i by the Personal Data Protection Office which were mentioned in the GDPR or read "between the lines" there data protection policy principles of privacy by design and privacy by default procedure for exercising the rights of data subjects data retention rules procedure for granting authorizations register of authorizations training procedure internal audit procedure verification procedure of cooperating entities. It is important that the organization pays attention to the subject and content of the above documents their name and structure are not important.
Please also remember that the above scope is not obligatory the necessary documents should be demonstrated by risk analysis as not every organization has the same risks. I hope you learned from this article that GDPR Phone Number List documentation in your organization is needed or even essential GDPR documentation must be individually adapted to the processes operating in your organization GDPR documentation should include elements required from the list from the Personal Data Protection Office but also other elements that are particularly recommended or constitute good practice for your organization.
If you feel that this is "black magic" for you please contact us we will be happy to help iSecure Signet iSecure is a consulting company whose activities are focused on issues related to personal data protection and information security including comprehensive implementation of the GDPR preparation of action plans in situations of special threats conducting penetration tests implementation of the ISO standard and legal services for companies operating on the Internet. iSecure experts also conduct training and are the authors of numerous publications and speeches.