Whether you must, and how.
WHAT THE REQUIREMENT BROADLY IS
Organisations meeting defined criteria must register with the Commission.
WHAT THE CRITERIA GENERALLY RELATE TO
The volume of data subjects The nature of the processing The sector
WHY YOU MUST CHECK RATHER THAN ASSUME
Thresholds are set by regulation and revised.
WHAT REGISTRATION TYPICALLY INVOLVES
Providing organisational details Describing your processing Naming a contact for data protection matters Paying a fee, where applicable
WHAT ELSE HAS HISTORICALLY BEEN REQUIRED
A periodic audit or compliance filing, for organisations above a threshold.
WHAT SUCH A FILING TYPICALLY COVERS
What data you process Your lawful bases Security measures Third parties involved Rights handling
WHY IT IS USEFUL BEYOND COMPLIANCE
Preparing it forces you to actually know what you hold.
WHAT TO DO FIRST
Establish whether you are within scope.
HOW
The Commission's guidance, or a practitioner.
WHAT TO PREPARE BEFORE REGISTERING
An inventory of your processing.
WHY
Every question depends on it.
WHAT TO RECORD
The registration, its date, and any renewal requirement.
WHAT TO CALENDAR
Renewal and any periodic filing.
WHAT TO AVOID
Discovering an obligation after a complaint.
