The Spanish data protection authority – AEPD – has published a Model Data Protection Impact Assessment ‘DPIA) Report for the Private Sector. it includes the factors that must be taken into account by the private sector in order to perform a DPIA, including the description of the data processing activity, its purpose and legal basis, as well as risk mitigating measures.
Microsoft 365 faces darkening GDPR compliance clouds after German report
German DPAs has found Microsoft has still not been able to resolve any of its cloud-based 365 productivity products compliance