Preparation of documents required in the Act on the Protection of Personal Data
The Polish Act on the Protection of Personal Data imposes an obligation to prepare and update a number of documents describing the processed data and IT systems. It is commonly thought that this obligation refers only to those personal data filing systems that need to be registered at the Inspector General for Personal Data Protection. The provisions of the fifth chapter of the act clearly stipulate, however, that it is necessary to protect (and to possess relevant documentation) each processed personal data filing system, regardless of whether it falls within the registration obligation.
Within this service our company prepares the following documents:
- Security Policy,
- IT System Management Manual,
- necessary records,
- authorisation forms,
- registration applications for data filing systems.
We treat each project individually and documents developed during a particular project reflect the features of the company in question. This is crucial as application of templates leads to development of documents that do not match the reality and procedures that are problematic to implement in a particular company.