more detailed training, e.g. HR, Coaching, Performance, Membership, IT? Is non-compliance with the various GDPR compliance linked to potential disciplinary polices linked to the potential for measures/staff handbook □ disciplinary action in relation to staff? If so, how is this achieved, e.g. Employment contract updated □ policies form part of staff handbook? Data Protection Impact Assessment (DPIA) Assessment process carried out for any processing that is likely to result a high risk to the rights and freedoms of natural “in i.e. the organisation: persons.” Uses systematic and extensive profiling or automated decision-making to make significant decisions about people. □ Processes special category data or criminal offence data on a large scale. □ Systematically monitors a publicly accessible place on a large scale. □ Have any higher risk data processing [The following nine criteria should be considered, in order to activities been identified? establish whether the processing operations organisation’s require a DPIA due to their inherent high risk. A data controller can consider that a processing activity meeting two of the below criteria would require a DPIA to be carried out: Evaluation or scoring. Automated decision-making with significant effects. Systematic processing Sensitive data or data of a highly personal nature. Processing on a large scale. Matching or combining datasets e.g. originating from
more detailed training, e.g. HR, Coaching, Performance, Membership, IT? Is non-compliance with the various polices linked to the potential for disciplinary action in relation to staff? If so, how is this achieved, e.g. policies form part of staff handbook? GDPR compliance linked to potential disciplinary measures/staff handbook □ Employment contract updated □ Data Protection Impact Assessment (DPIA) Have any higher risk data processing activities been identified? Assessment process carried out for any processing that is likely to result “in a high risk to the rights and freedoms of natural persons.” i.e. the organisation: Uses systematic and extensive profiling or automated decision-making to make significant decisions about people. □ Processes special category data or criminal offence data on a large scale. □ Systematically monitors a publicly accessible place on a large scale. □ [The following nine criteria should be considered, in order to establish whether the organisation’s processing operations require a DPIA due to their inherent high risk. A data controller can consider that a processing activity meeting two of the below criteria would require a DPIA to be carried out: Evaluation or scoring. Automated decision-making with significant effects. Systematic processing Sensitive data or data of a highly personal nature. Processing on a large scale. Matching or combining datasets e.g. originating from