Intra-Group Transfers: Transfer Impact Assessment 2026
Why intra-group data transfers need a transfer mechanism and a transfer impact assessment, how SCCs and BCRs work,…
CART
Why intra-group data transfers need a transfer mechanism and a transfer impact assessment, how SCCs and BCRs work,…
How to identify and involve AI impact assessment stakeholders: affected groups, internal owners, external experts, consultation methods and…
When legitimate interests supports fraud prevention: Recital 47, the three-part test, data sharing, profiling and automated decisions, safeguards…
Can you rely on legitimate interests to monitor employees? The three-part test, proportionality, transparency and when a DPIA…
How to assess vendor concentration risk: supplier, service, geographic and sub-supplier concentration, with measures, thresholds and mitigation options.
How to record international transfers in your RoPA under Article 30(1)(e): naming countries, transfer tools, derogations and links…
How to record RoPA retention periods under Article 30(1)(f): setting limits, citing legal bases, linking to a retention…
How to handle the IMS context of the organization: identify internal and external issues, interested parties, scope and…
Which HACCP records to keep, how to complete and review them, how long to retain them and what…
What an IATF 16949 control plan must contain: three phases, required controls, reaction plans, review triggers and how…
A guide to the NCA ECC defense domain: its subdomains from asset management to web application security, and…
Which data governance metrics to track: adoption, data quality, stewardship, policy compliance and business value, with definitions and…
October 19, 2026
October 18, 2026
October 18, 2026
October 15, 2026
October 15, 2026