Special Interest Group: GDPR - Peer to Peer Advice

Per the previous entry, the Article 29 Working Party is an authorized EU body that provides formal, legal guidance on the GDPR. Essentially, it interprets the GDPR in to specific areas of interest to provide clarity on the various recitals and articles in the GDPR. They are 'must reads' for the DPO's, GC's and CIO's in organizations that fall under the GDPR regulations. (And they are a bit long-winded...but still helpful.)

In addition to the previous entry on WP29 guidance for employers, please find attached:

• Guidance on Transparency (a CRITICAL component under the GDPR)
• Guidance on Consent (another critical component)
• Guidance on Breach Notification (If you thought California and HIPAA were tough, wait until you read this...)
• Guidance on Data Protection Impact Assessments (For new or modified IT systems. A.k.a Privacy Impact Assessments in the US)