Spain’s data protection authority, the Agencia Española de Protección de Datos, launched a redesigned version of its Gestiona tool which supports entities with risk management and conducting impact assessments under the EU General Data Protection Regulation.
The Guernsey Office of the Data Protection Authority issued new guidance on data subject access requests for professionals working with personally identifiable information. The document offers “a step-by-step process” for data controllers to produce legally compliant DSARs.