Establish aData Mappingof the data processing activities of your organization toget a clear picture of the situation. Data Protection Authorities often provide spreadsheet templates to help in this task. For each process, document the type of personal data and how it was collected ; thepurpose,lega...
Imagine a spreadsheet with information about thousands of individuals, but it only has two pieces of data on each one: an anonymous identifier and gender. It reads, “Person #1 - Female,” Person #2 - Male,” and so on. Taken in isolation, this is not personal data because it is not...