GDPR handbook for Record of Processing Activities. Case: The Color Club A/S
Tran, Ngoc Cat My Jr (2020)
2020
All rights reserved. This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.
Julkaisun pysyvä osoite on
https://urn.fi/URN:NBN:fi:amk-2020061218471
https://urn.fi/URN:NBN:fi:amk-2020061218471
Tiivistelmä
The purpose of the thesis is to create a handbook about General Data Protection Regulation (GDPR). The handbook focuses on Records of processing activities, which is the Chapter 4 Art 30 of the GDPR. To find the answer how should a business make their Records of processing activities documentation, a research has been conducted to fully comprehend the regulations and to investigate how the regulations applied to the case company. The handbook’s objective is to give overall information about General Data Protection Regulation, and especially focus on the Records of processing activities regulation. Moreover, the handbook provides a sample Records of processing activities documentation which is based on one of the company’s departments.
The knowledge base for the research is mainly the Regulation (EU) 2016/679 Chapter 4 Art 30. Some other chapters in the regulations are also in consideration if related to the topic. To achieve the objectives of the handbook, a literature review has been conducted to clearly interpret the unfamiliar terms and phrases in the regulation. Qualitative research in the form of semi-structured interviews have been conducted to collect practical data about the organizations. The collected data is analyzed using the thematic method and is applied to the Records of the processing activities documentation afterward.
The handbook has fulfilled the requirements from the company. The handbook helps the readers gain awareness about the GDPR in general, and have knowledge about the Records of processing activities regulations. By providing a simple interpretation of the law languages, the readers can easily understand the regulations. The Records of processing acitvities template attached gives a practical demonstration for the readers to understand how the regulation could apply to the company.
The handbook is a general introduction for the company in the initial phase of adapting to the GDPR, in which the Records of processing activities is not the only regulation. The research leads to the conclusion that before implementing the Records of processing activities, it is crucial to have a broad, coherent, integrated view on everything relating to personal data that the company is storing and using.
The knowledge base for the research is mainly the Regulation (EU) 2016/679 Chapter 4 Art 30. Some other chapters in the regulations are also in consideration if related to the topic. To achieve the objectives of the handbook, a literature review has been conducted to clearly interpret the unfamiliar terms and phrases in the regulation. Qualitative research in the form of semi-structured interviews have been conducted to collect practical data about the organizations. The collected data is analyzed using the thematic method and is applied to the Records of the processing activities documentation afterward.
The handbook has fulfilled the requirements from the company. The handbook helps the readers gain awareness about the GDPR in general, and have knowledge about the Records of processing activities regulations. By providing a simple interpretation of the law languages, the readers can easily understand the regulations. The Records of processing acitvities template attached gives a practical demonstration for the readers to understand how the regulation could apply to the company.
The handbook is a general introduction for the company in the initial phase of adapting to the GDPR, in which the Records of processing activities is not the only regulation. The research leads to the conclusion that before implementing the Records of processing activities, it is crucial to have a broad, coherent, integrated view on everything relating to personal data that the company is storing and using.