LIBRe Foundation advises a medical center on the implementation of the General Data Protection Regulation, in particular data mapping and analysis of data flows, functions and the responsibilities of the data protection officer, development of internal rules and procedures, etc.
The focus of the consultations is to prepare data mapping and analysis of data flows and analyse the nature, scope, context and purposes of processing personal data by reviewing internal documents and information and providing expert evaluation of:
(a) categories of data subjects;
(b) categories of personal data processed;
(c) processing purposes, including through the organization's technology portfolio and its interrelation with the volumes of information and personal data handled by the organization; and
(d) means of processing (description of data repositories, data flows, processes and actors involved, etc.), including internal data flows and interconnections between the client organization and third parties, main establishment, storage limitations, the positions in the organization handling the data or recipients to whom the personal data have been disclosed.
