GDPR generally applies to all businesses.

There is an exemption about not maintaining records of how data is used, but if a person requests such a record, you would have to reconstruct it after the fact.

I was not aware of any exemption on publishing why and how data is collected and processed, but that may be ignorance on my part.

Alan

At 30/04/2018 10:22 AM, Eduardo Diaz wrote:

A friend of mine quoted the following from an article written here (bullet #9): https://government.diginomica.com/2018/01/22/gdpr-compliance-here-are-the-14-things-you-actually-need-to-do/

"Smaller firms – those defined as hhaving 250 employees or less – do not have to comply with all GDPR rrules as standard. If your organisation falls into this band, thereā€™s no need to have documentation of why personal data is being collected and processed, the information youā€™re storing or how long for. Smaller firms are not required to maintain a record of processing activities unless this carries a risk to the rights and freedoms of data subjects, it is a regular occurrence, or it relates to certain data like criminal convictions and offences."

The question: Is this statement true or false. If false what 's the real thing?

Thanks to whomever answers this.

-ed

Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Microsoft-Exchange-Diagnostics:
1;YTOPR01MB0396;27:Ytj/AIpssqiibmKnz50JsE2dlIuhl4mAZZ7KgUS70r3MLVG2H5KbNLby1tvjuxmL9xkihjOX8lTqRqdvkojOVcdFn+7J6Rg9dLd4q6K0sBwFMmlBydtVxY/DHJHtiGSJ
X-Microsoft-Antispam-Message-Info:
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

------
NA-Discuss mailing list
NA-Discuss@atlarge-lists.icann.org
https://atlarge-lists.icann.org/mailman/listinfo/na-discuss

Visit the NARALO online at http://www.naralo.org
------