5 ms·

Would be great if someone made a check list of things, since legal documents are barely readable for normal humans

• maephisto 8y ago
  Yeah, my thoughts exactly... If anything good gets out this thread I'll compile a checklist and pass it around.
• usgroup 8y ago
  Et voila: https://ico.org.uk/for-organisations/resources-and-support/data-protection-self-assessment/ https://ico.org.uk/for-organisations/resources-and-support/d...
• dangrossman 8y ago
  There are many such resources already. https://gdprchecklist.io/ https://gdprchecklist.io/ https://blog.varonis.com/gdpr-requirements-list-in-plain-english/ https://blog.varonis.com/gdpr-requirements-list-in-plain-eng... https://ico.org.uk/for-organisations/resources-and-support/data-protection-self-assessment/ https://ico.org.uk/for-organisations/resources-and-support/d...
  • Someone1234 8y ago
    What's interesting is that I've had to meet many of those already for California's COPPA and previous privacy laws, so I'm quite confused at why people are acting like this is all brand new and never existed before... As an aside that checklist is misleading. Some of the requirements they list expressly don't apply to small businesses, for example you don't need a DPO unless you're over 250 employees.
    • cdjk 8y ago
      Nope. Look at article 37: https://gdpr-info.eu/art-37-gdpr/ https://gdpr-info.eu/art-37-gdpr/ Are you a large scale data processor of special categories of data as defined in Article 9? That includes data that can be used to determine racial or ethnic origin, health data, and data about sexual activity and orientation. Large scale is helpfully not defined anywhere. So if you run a site around a health condition or that lets people specify their sexual orientation some place you might need a DPO.