What should the company size be for data protection documentation to be necessary?

The records of processing activities are always obligatory if there are 250 or more employees. If there are less than 250 employees, it would only be necessary if the data processing is not only occasional, the processing caries a risk to the rights and freedoms of data subjects, if special categories of data are being processed, or personal data is processed through criminal convictions and offences.

Get an Offer
089 442 550 - 62649