ABSTRACT
It is necessary for the data protection ofcer (DPO) to understand what data the organization has and the purpose of those data. The following is an example of an audit tool from the European Data Protection Supervisor (EDPS). It is aimed mostly at inward-facing personal data collection.
