“We started even before GDPR was discussed,” she says. The company began data flow mapping and privacy ... the Record of Processing Activities (RoPA)—article 30 of the GDPR regulation ...

Once established and the system is in use, any device updates that could later the data flow should be subject to an appropriate controlled change. A data-flow diagram ... as with GDPR in the ...