Responsibility of the controller (accountability)
Art. 24
-
Last updated
Mandatory
Catalog reference
Implement technical and organisational measures proportionate to the risk to ensure and be able to demonstrate that processing complies with the Regulation, and review and update those measures as processing changes.
Narrative — how we satisfy this requirement
The Management Board is accountable for data protection, signs the privacy policy, and receives the yearly report of the Data Protection Officer.
Review
On trackNext review is 10/28/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due