Let's learn from the French experience by using the CNIL data for real:
https://www.data.gouv.fr/fr/datasets/organismes-ayant-designe-un-e-delegue-e-a-la-protection-des-donnees-dpd-dpo/
Overall goal
First point of the action plan: "develop the mapping schema".
Acceptance criteria
The data should help with article 12(2) GDPR:
The controller shall facilitate the exercise of data subject rights under Articles 15 to 22.
At a minimum, a data subject with limited technical skills should be able to exercise their rights by either:
- extracting the information they need from the open data, potentially through a derived version or a tool provided by us;
- letting a service provide all the data, for instance https://www.mydatadoneright.eu/ .
Let's learn from the French experience by using the CNIL data for real:
https://www.data.gouv.fr/fr/datasets/organismes-ayant-designe-un-e-delegue-e-a-la-protection-des-donnees-dpd-dpo/
Overall goal
First point of the action plan: "develop the mapping schema".
Acceptance criteria
The data should help with article 12(2) GDPR:
At a minimum, a data subject with limited technical skills should be able to exercise their rights by either: