Welcome to your Survey 1. Did you carry out an audit of the existing personal data security measures before 25 May 2018? Yes No I don't know 2. Have you conducted an analysis of the need to appoint a Data Protection Officer in your company? Yes No I don't know 3. Do you have documented rules of personal data processing in order to be able to comply with the principle of accountability? Yes No I don't know 4. Have you adjusted the data processing consent clauses and information obligations towards the persons whose data you process to the new regulations? Yes No I don't know 5. Do you keep a register of processing activities and a register of categories of processing activities meeting the requirements? Yes No I don't know 6. Have you determined how to proceed in the event of a data security incident? Yes No I don't know 7. Do you know your obligations related to reporting incidents to the President of the Personal Data Protection Office? Yes No I don't know 8. Have you authorised your employees to process personal data and have you collected confidentiality statements from them? Yes No I don't know 9. Have you entered into appropriate outsourcing agreements with all subcontractors to whom you outsource personal data? Yes No I don't know 10. Have you trained your employees in the field of personal data security? Yes No I don't know 11. Are you ready to carry out a periodic review of existing data security measures? Yes No I don't know 12. Are you ready for a personal data security audit by your customer? Yes No I don't know 13. Is your IT system ready for the “right to be forgotten” (deletion of personal data on request)? Yes No I don't know 14. Does your IT system, in which personal data are processed, force an automatic change of passwords, e.g. once every 30 days? Yes No I don't know 15. Do you know how long recordings of your CCTV system (camera monitoring) are stored? Yes No I don't know 16. Does each of your systems have data protection safeguards enabled by default? Yes No I don't know 17. Are you sure that your smartphone/laptop with configured e-mail access has adequate data protection safeguards in place? Yes No I don't know Time's up
