The ROPA is missing field(s) to document, as per GDPR Article 6, the lawful bases for processing.
Ideally 2 fields would be needed:
One to describe the chosen option (performance of a contract, legal obligation, consent, ...)
One to document the source (name of the contract, identification of the law, ...)
The ROPA is missing field(s) to document, as per GDPR Article 6, the lawful bases for processing.
Ideally 2 fields would be needed:
One to describe the chosen option (performance of a contract, legal obligation, consent, ...) One to document the source (name of the contract, identification of the law, ...)