What is a Personal Data Inventory?

What is a Personal Data Inventory?

What is a Data Inventory? | Personal Data Protection Lawyer | Izmir Lawyer | Izmir Law Firm

Kişisel veri envanteri, Data controllers detail their personal data processing activities, which are carried out in accordance with their business processes, by associating them with the purposes and legal basis for personal data processing, data category, recipient group to whom the data is transferred, and the data subject group; and by explaining the maximum retention period necessary for the purposes for which the personal data is processed, the personal data intended to be transferred to foreign countries, and the measures taken regarding data security. inventoryIt expresses i.

Accordingly, the Inventory is a type of report that will emerge as a result of a detailed analysis conducted by data controllers who process personal data within the scope of their activities. This analysis includes evaluating all processes, examining all activities within these processes, identifying each piece of personal data processed individually, determining the purposes and legal grounds for processing this personal data, whether it has been transferred, to whom it has been transferred, to whom the processed personal data belongs, the retention period determined by the data controller for each piece of personal data, whether it has been transferred abroad, and what technical or administrative measures have been taken for the security of the data.

The reason for imposing the obligation to prepare an inventory is to ensure that data controllers comply with the Law in all processes related to their activities; in other words, to prevent violations of the Law.
The aim is to easily determine whether or not a personal data processing situation has occurred. In other words, it is a form of self-monitoring by the data controller regarding the compliance of personal data processing activities with the Law.

Who is responsible for preparing the inventory?

Regulation on the Registry of Data Controllers Data controllers who are obligated to register in the registry under Article 5, Personal Data Processing InventoryThey are responsible for preparing it. Information to be disclosed to the Registry in registration applications is subject to Personal Data Processing. InventoryIt is prepared based on this. Data controllers exempt from registration obligations. from here You can learn.

How to Prepare an Inventory?

You can follow these steps when preparing your Personal Data Inventory. Regarding the minimum elements that should be included in a personal data inventory: our article You can check it out.

1. Identification of Personal Data Based on Process or Activity
2. Determining the Nature of the Personal Data Identified
3. Determining the Legal Basis for Processing Personal Data
4. Determining the Purposes of Personal Data Processing
5. Identifying the Data Subject Group
6. Determining the Retention Period of Processed Personal Data
7. Identifying the Recipients/Recipient Groups to Whom Processed Personal Data is Transferred
8. Identifying Personal Data Transferred to Foreign Countries
9. Determining the Technical and Administrative Measures Taken for the Processed Personal Data

For more detailed information you can visit our Contact page.

Address: Nergis Neighborhood, Girne Boulevard No: 83, Floor 2, Apartment 2, Karşıyaka, İzmir

E-mail: [email protected]

Phone: +90 534 415 52 56