Guidelines for the preparation of documentation for technical and organizational measures

The Agency for the Protection of Personal Data (AZLP), actively monitoring the application of the Law on the Protection of Personal Data, and after the analysis of the activities undertaken by the controllers and processors in relation to their compliance in operation with the provisions of the Law within the framework of the established 18 month period (February 24, 2020 – August 24, 2021), as well as the perception of the challenges they often face, in order to further promote and strengthen the awareness of controllers and processors about their obligations under this law, developed and adopted these Guidelines for the preparation of the necessary documentation for technical and organizational measures in the processing of personal data (Directions ).

DOCUMENTATION

• Statement on confidentiality and protection of personal data processing ;
• Records of authorized persons who have authorized access to documents and the information system ;
• Decision on the appointment of an officer for the protection of personal data ;
• Decision on the determination of an authorized person for the security of the information system (administrator of the information system).