Menu Close

What should a Personal Data Inventory include?

Mustafa Yolcu

Personal Data Inventory | Personal Data Protection Lawyer | Izmir Lawyer | Izmir Law Firm

Örnek Kişisel Veri Envanteri
Personal Data Protection Authority Sample data inventory published by

What is a Data Inventory?

Personal Data Processing Inventory: This refers to the inventory created by data controllers detailing their personal data processing activities based on their business processes; associating these activities with the purposes of personal data processing, data category, recipient group to whom the data is transferred, and the data subject group; and specifying the maximum period for which the personal data is necessary for the purposes for which it is processed, the personal data intended to be transferred to foreign countries, and the measures taken regarding data security. This article explains the differences between the Personal Data Inventory and the Data Controllers Registry. from here You can reach us.

What Should a Data Inventory Include?

Data inventory according to the Regulation on the Registry of Data Controllers minimum aspect;

  1. Data category,
  2. The purposes and legal basis for processing personal data.
  3. Transferred recipient/recipient groups
  4. Data subject groups
  5. The maximum retention period for personal data necessary for the purposes for which they are processed
  6. Personal data intended to be transferred to foreign countries
  7. Technical and administrative measures taken regarding data security

It must be included.

How to Create a Data Inventory?

The following steps can be followed when preparing the data inventory:;

  1. Identification of Personal Data Based on Process or Activity
  2. Determining the Nature of the Personal Data Identified
  3. Determining the Legal Basis for Processing Personal Data
  4. Determining the Purposes of Personal Data Processing
  5. Identifying the Data Subject Group
  6. Determining the Retention Period of Processed Personal Data
  7. Identifying the Recipients/Recipient Groups to Whom Processed Personal Data is Transferred
  8. Identifying Personal Data Transferred to Foreign Countries
  9. Determining the Technical and Administrative Measures Taken for the Processed Personal Data

For our other articles we have prepared under the Personal Data Protection Law;

Logo

Address: Nergis Neighborhood, Girne Boulevard No: 83, Floor 2, Apartment 2, Karşıyaka, İzmir

E-mail: info@efeshukuk.com

Phone: +90 534 415 52 56

Tagged , , ,

Related Articles