[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBIPV4sB8B7UNPwvsRkLh-AYlFltrdKZ3bLZmls4Kdeo":3},{"sections":4,"resultAnalysis":905,"id":906,"version":907,"newVersion":28,"label":908,"isPinned":31,"isShared":31,"sharingToken":909,"isRevision":28,"isBlockAnalysisShared":31,"nbReferences":910,"referenceId":9,"nbResponses":11,"parentId":9,"revisionDescription":9,"logoUrl":911,"description":912,"scheduleIntervalDays":9,"versionNumber":913,"dateCreation":914,"dateUpdate":915,"dateArchived":9,"archived":28,"type":916,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":916,"creator":917,"objectType":9,"defaultOwners":925,"tags":927,"privacyHubs":9,"nbQuestions":937,"nbQuestionsRequired":938,"nbDatas":11,"deadLineDays":9},[5,162,244,308,377,673,772,863],{"id":6,"slug":7,"label":8,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":13,"sections":14},"94857966-a268-4f99-8011-2e63fca8d24c","introduction-1","Introduction",null,"Default",0,"SectionType_Default",[],[15,33,46,135,148],{"id":16,"slug":17,"label":18,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":19,"questions":20,"sections":32},"15d9410b-33f4-4029-a922-3d35aae7ac7d","initial","Preamble","",[21],{"id":22,"slug":23,"label":24,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":29,"displayConditions":9,"answers":30,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"1c19b118-eef4-4723-b88e-ae9f9254ab2e","write-a-preamble-explaining-the-purpose-of-the-annual-review","Write a preamble, explaining the purpose of the annual review","RichText",2,"Text editor",false,[],[],true,[],{"id":34,"slug":35,"label":36,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":37,"questions":38,"sections":45},"6690a819-8d3e-41cd-85cd-48ad0579d679","presentation-de-lorganisme","presentation-of-the-organization","\u003Cp>Provide a brief presentation of the organization (which is the data controller) including business sector, number of employees, revenue, locations, whether there is a delegation of processing, etc.\u003C/p>",[39],{"id":40,"slug":41,"label":42,"tooltipHtml":9,"descriptionHtml":19,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":43,"displayConditions":9,"answers":44,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"7f57a7dd-315b-49eb-ab1e-c6dcba72ef6c","provide-a-brief-presentation-of-the-organization-which-is-the-data-controller-including-business-sector-number-of-employees-revenue-locations","Presentation of the organization",[],[],[],{"id":47,"slug":48,"label":49,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":50,"sections":134},"58febaf1-56d4-4094-93ab-bbce0656f165","presentation-of-the-data-protection-officer-dpo","Presentation of the Data Protection Officer (DPO)",[51,59,77,95,113,120,127],{"id":52,"slug":53,"label":54,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":55,"typeIndex":56,"typeColor":9,"typeIcon":9,"typeText":55,"dynamicSelectType":9,"editableOptions":28,"complianceRules":57,"displayConditions":9,"answers":58,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"83083f58-0b26-47d5-be21-b250b249d83e","what-is-the-date-of-designation-of-the-dpo","What is the date of designation of the DPO?","Date",3,[],[],{"id":60,"slug":61,"label":62,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":63,"typeIndex":64,"typeColor":9,"typeIcon":9,"typeText":65,"dynamicSelectType":9,"editableOptions":28,"complianceRules":66,"displayConditions":9,"answers":67,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"d5fdebf3-9590-43f4-9bcf-345f9343189e","did-the-controller-have-an-obligation-to-designate-a-dpo","Did the controller have an obligation to designate a DPO?","Radio",7,"Unique choice list",[],[68,73],{"id":69,"color":70,"rangeValue":9,"label":71,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":72},"5cc3876b-8c37-4b50-8714-0bf0fbf487cf","#ffffff","Yes",[],{"id":74,"color":70,"rangeValue":9,"label":75,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":76},"ae0f5e78-1b93-44ed-b131-4c7abf0cde17","No",[],{"id":78,"slug":79,"label":80,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":63,"typeIndex":64,"typeColor":9,"typeIcon":9,"typeText":65,"dynamicSelectType":9,"editableOptions":28,"complianceRules":81,"displayConditions":9,"answers":82,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"2eef0883-a57b-4ecd-96ab-3f02bff986e5","what-is-the-status-of-the-dpo","What is the status of the DPO?",[],[83,87,91],{"id":84,"color":70,"rangeValue":9,"label":85,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":86},"21190302-9953-4157-999d-da207bd9e8b4","Internal",[],{"id":88,"color":70,"rangeValue":9,"label":89,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":90},"2cffee6b-45d3-452e-b16f-31ba356936b4","External",[],{"id":92,"color":70,"rangeValue":9,"label":93,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":94},"c420a3fb-e941-40c8-95db-755649caed82","Mutualized (performs its function for several data controllers)",[],{"id":96,"slug":97,"label":98,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":63,"typeIndex":64,"typeColor":9,"typeIcon":9,"typeText":65,"dynamicSelectType":9,"editableOptions":28,"complianceRules":99,"displayConditions":9,"answers":100,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"1ed0f6fb-31b7-442e-a5b8-2a2588b90c5a","what-is-the-type-of-designation-of-the-dpo","What is the type of designation of the DPO?",[],[101,105,109],{"id":102,"color":70,"rangeValue":9,"label":103,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":104},"68bb83e0-216e-46ee-88db-78cdd591891d","General designation (for data processing activities which had to be declared before the DPO was created and which now simply have to be listed in its file of files)",[],{"id":106,"color":70,"rangeValue":9,"label":107,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":108},"4d03b368-015f-484a-97f9-879ba2053110","Partial designation (concerns certain data processing activities or categories of processing activities)",[],{"id":110,"color":70,"rangeValue":9,"label":111,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":112},"dd09db33-3849-4773-a2b1-ba5bc6e8572d","Extended designation (applies to all data processing activities)",[],{"id":114,"slug":115,"label":116,"tooltipHtml":9,"descriptionHtml":117,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":118,"displayConditions":9,"answers":119,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"f129ad21-28fb-440b-b1b7-bf5c000a8444","detail-the-dpos-skills-and-training","Detail the DPO's skills and training","\u003Cp>Remind if he/she is a professional, his/her experience, diplomas, etc. \u003C/p>",[],[],{"id":121,"slug":122,"label":123,"tooltipHtml":9,"descriptionHtml":124,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":125,"displayConditions":9,"answers":126,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"c2598eb1-9ef7-4269-abd4-a1be980a10e5","what-are-the-means-the-dpo-has-to-perform-its-function","What means does the DPO have at his disposal to carry out his function?","\u003Cp>This concerns the dedicated team, the budget, the relays (local correspondents) set up in the organization, etc.\u003C/p>",[],[],{"id":128,"slug":129,"label":130,"tooltipHtml":9,"descriptionHtml":131,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":132,"displayConditions":9,"answers":133,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"8387acc6-e569-4510-be5f-8a796dadcf5b","detail-the-relationship-between-the-dpo-and-the-data-controller","Detail the relationship between the DPO and the data controller","\u003Cp>This concerns the type of exchanges, the frequency of these exchanges, the means put in place to guarantee the independence and freedom of action of the DPO, etc.\u003C/p>",[],[],[],{"id":136,"slug":137,"label":138,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":139,"questions":140,"sections":147},"9a666a19-0a3f-405d-a27e-24b0d08bc33b","internal-procedures-implemented","Internal procedures implemented","\u003Cp>As part of an initial assessment, it is advisable to indicate the internal procedures put in place, with the internal network set up (internal relays) if this is the case. \u003C/p>\u003Cul>\u003Cli>\u003Cp>What is the organization of the privacy policy? ;\u003C/p>\u003C/li>\u003Cli>\u003Cp>Is there a risk management policy? ;\u003C/p>\u003C/li>\u003Cli>\u003Cp>What are the supports? ;\u003C/p>\u003C/li>\u003Cli>\u003Cp>etc...\u003C/p>\u003C/li>\u003C/ul>",[141],{"id":142,"slug":143,"label":144,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":145,"displayConditions":9,"answers":146,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"c3162d17-48cd-42d7-b638-5b36e69e1d8f","describe-the-internal-procedures-implemented","Describe the internal procedures implemented",[],[],[],{"id":149,"slug":150,"label":151,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":152,"questions":153,"sections":161},"65f96914-7e27-48c4-86a0-6f144d6f15a5","highlights-of-the-year","highlights of the year","\u003Cp>Highlight(s) of the year that do not fall under specific paragraphs should be indicated in this section, such as: \u003C/p>\u003Cul>\u003Cli>\u003Cp>the number of dossiers submitted for authorization;\u003C/p>\u003C/li>\u003Cli>\u003Cp>the introduction of a particular dossier such as biometrics; \u003C/p>\u003C/li>\u003Cli>\u003Cp>the new internal organization;\u003C/p>\u003C/li>\u003Cli>\u003Cp>sanctions that have hit a competitor, whose supervisory authority's recommendations may apply to the organization...\u003C/p>\u003C/li>\u003C/ul>",[154],{"id":155,"slug":156,"label":157,"tooltipHtml":9,"descriptionHtml":158,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":159,"displayConditions":9,"answers":160,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"218dbb3d-1ffe-4be9-94fb-a7cbbea070f7","indicate-the-highlights-of-the-year","Indicate the highlights of the year","\u003Cp>Indicate the highlight(s) of the year that do not fall under specific paragraphs, for example : \u003C/p>\u003Cul>\u003Cli>\u003Cp>Number of dossiers submitted for authorization;\u003C/p>\u003C/li>\u003Cli>\u003Cp>Adherence to the Safe Harbor Agreement for data flows to the USA;\u003C/p>\u003C/li>\u003Cli>\u003Cp>Implementation of a particular dossier such as biometrics; \u003C/p>\u003C/li>\u003Cli>\u003Cp>New internal organization;\u003C/p>\u003C/li>\u003Cli>\u003Cp>Sanctions that hit a competitor...\u003C/p>\u003C/li>\u003C/ul>",[],[],[],{"id":163,"slug":164,"label":165,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":166,"sections":167},"54c2344c-a150-446b-b569-882475f4c62e","list-of-personal-data-processing-activities","List of personal data processing activities",[],[168,207,232],{"id":169,"slug":170,"label":171,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":172,"questions":173,"sections":206},"f671fce6-a7f3-4a3a-b83f-fc4ef55a8361","the-record-of-data-processing-activities-ropa","The record of data processing activities (ROPA)","\u003Cp>This section is of interest when drawing up the first annual review and when modifying data processing activities.\u003C/p>",[174,180,186,194,200],{"id":175,"slug":176,"label":177,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":178,"displayConditions":9,"answers":179,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"99d84395-c5d3-4483-9ed4-1f4052d43903","is-the-organization-concerned-by-the-record-of-data-processing-activity","Is the organization concerned by the record of data processing activity?",[],[],{"id":181,"slug":182,"label":183,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":184,"displayConditions":9,"answers":185,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"69d072e1-69cc-4416-bc59-2e98e083d216","describe-the-preliminary-work-of-establishing-the-record-of-processing-activities","Describe the preliminary work of establishing the record of processing activities",[],[],{"id":187,"slug":188,"label":189,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":190,"typeIndex":191,"typeColor":9,"typeIcon":9,"typeText":190,"dynamicSelectType":9,"editableOptions":28,"complianceRules":192,"displayConditions":9,"answers":193,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"030b01ba-0fdc-496b-8466-9d05805b4d2e","how-many-processing-activities-does-this-record-of-processing-activities-include","How many processing activities does this record of processing activities include?","Number",5,[],[],{"id":195,"slug":196,"label":197,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":190,"typeIndex":191,"typeColor":9,"typeIcon":9,"typeText":190,"dynamicSelectType":9,"editableOptions":28,"complianceRules":198,"displayConditions":9,"answers":199,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"057d5d85-197d-41b5-9a08-f9aade79c88f","what-is-the-quantity-of-processing-activities-created-modified-or-deleted-during-the-period-covered-by-the-review","What is the quantity of processing activities created, modified or deleted during the period covered by the review?",[],[],{"id":201,"slug":202,"label":203,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":204,"displayConditions":9,"answers":205,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"96555292-c6c1-4986-910a-6c8b66bf631e","have-all-the-files-been-filed-with-the-local-data-protection-authority","Have all the files been filed with the local data protection authority?",[],[],[],{"id":208,"slug":209,"label":210,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":211,"questions":212,"sections":231},"35bd1a50-8653-4d32-bd4f-f5d9a4fa8ba2","evolution-of-the-data-processing-activities","Evolution of the data processing activities","\u003Cp>This section allows you to determine what new processing activities the organization has, if any have been modified or deleted. Also, this concerns processing activities subject to authorization.\u003C/p>",[213,219,225],{"id":214,"slug":215,"label":215,"tooltipHtml":9,"descriptionHtml":216,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":217,"displayConditions":9,"answers":218,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"0bbe88bf-727a-4a97-aa64-d6c1fc66f26d","describe-new-processing-activities-of-organism","\u003Cp>Even simple Excel databases if the data entered and the purpose justify it, or if they fall under CNIL exemptions or a simplified standard.\u003C/p>",[],[],{"id":220,"slug":221,"label":222,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":223,"displayConditions":9,"answers":224,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"2ad160ae-23b8-4d98-8b10-b224afb2cd87","describe-modified-or-deleted-processing-activities","Describe modified or deleted processing activities",[],[],{"id":226,"slug":227,"label":228,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":229,"displayConditions":9,"answers":230,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"de304d87-cb96-4c25-9f56-3758c35acfa5","describe-processing-activities-subject-to-authorization","Describe processing activities subject to authorization",[],[],[],{"id":233,"slug":234,"label":235,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":236,"sections":243},"1bb38fb8-87ce-4591-a2e5-b799357378a7","objectives-for-the-coming-year","Objectives for the coming year",[237],{"id":238,"slug":239,"label":240,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":241,"displayConditions":9,"answers":242,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"3592d36d-8df0-492d-8f0a-fc4d641d717d","describe-objectives-for-the-coming-year","Describe objectives for the coming year",[],[],[],{"id":245,"slug":246,"label":247,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":248,"sections":249},"d4b0ed5f-29ed-4205-b017-114ed2d82434","-","Spreading the privacy culture",[],[250,263,295],{"id":251,"slug":252,"label":253,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":254,"questions":255,"sections":262},"f421cd0f-f2a2-4ac9-bd1c-12497becd42a","privacy-watch","Privacy watch","\u003Cp>This section provides an update on news, preliminary questions put to an authority, data protection authorities recommendations, etc., related to the organization.\u003C/p>",[256],{"id":257,"slug":258,"label":259,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":260,"displayConditions":9,"answers":261,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"a9ea2d5f-0923-4906-a38a-9ab257b07551","describe-the-privacy-watch-carried-out","Describe the privacy watch carried out",[],[],[],{"id":264,"slug":265,"label":266,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":267,"sections":294},"c7a93194-0aa1-41a6-ae7e-4af1fb5c1049","training-and-awareness-raising","Training and awareness-raising",[268,274,282,288],{"id":269,"slug":270,"label":271,"tooltipHtml":9,"descriptionHtml":19,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":272,"displayConditions":9,"answers":273,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"e4f6d1ae-c1a2-4e55-bf7f-afea93b430a8","how-many-internal-and-external-training-courses-have-been-held","How many internal and external training courses have been held?",[],[],{"id":275,"slug":276,"label":277,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":278,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":279,"dynamicSelectType":9,"editableOptions":28,"complianceRules":280,"displayConditions":9,"answers":281,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"822f33c7-7821-412f-a424-5526ded20e86","are-there-any-upcoming-training-or-awareness-raising-events","Are there any upcoming training or awareness-raising events?","ShortText","Short text",[],[],{"id":283,"slug":284,"label":285,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":286,"displayConditions":9,"answers":287,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"bf564499-bf33-42b2-b130-9932cba4a2c1","has-there-been-any-feedback-of-information-important-to-the-life-of-the-company-as-a-result-of-the-newly-acquired-knowledge-if-so-please-provide-details","Has there been any feedback of information important to the life of the company as a result of the newly acquired knowledge? If so, please provide details",[],[],{"id":289,"slug":290,"label":291,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":292,"displayConditions":9,"answers":293,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"078c5a9e-275f-4c22-af65-b90cdc6037be","which-populations-are-targeted-by-the-training-hr-cio-lawyers-operational-staff-trainees-in-the-case-of-external-training","Which populations are targeted by the training? (HR, CIO, Lawyers, operational staff, trainees in the case of external training)",[],[],[],{"id":296,"slug":297,"label":298,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":299,"questions":300,"sections":307},"7506a4c7-8846-4d5d-ba06-088a7fcf7736","broadcasting-tools","Broadcasting tools","\u003Cp>This section details the tools used by the DPO in disseminating the privacy culture, such as:\u003C/p>\u003Cul>\u003Cli>\u003Cp>an intranet; \u003C/p>\u003C/li>\u003Cli>\u003Cp>educational sheets;\u003C/p>\u003C/li>\u003Cli>\u003Cp>good practice guides;\u003C/p>\u003C/li>\u003Cli>\u003Cp>a website;\u003C/p>\u003C/li>\u003Cli>\u003Cp>e-learning;\u003C/p>\u003C/li>\u003Cli>\u003Cp>internal network events. ..\u003C/p>\u003C/li>\u003C/ul>",[301],{"id":302,"slug":303,"label":304,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":305,"displayConditions":9,"answers":306,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"318e83bd-bfaf-48e6-ae1b-0ec8aecff02a","decrire-les-outils-de-diffusion","Describe broadcast tools",[],[],[],{"id":309,"slug":310,"label":311,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":312,"sections":313},"557c3c0f-6067-45c1-9fe9-bd74557481a8","consulting-activity-1","consulting activity",[],[314,340],{"id":315,"slug":316,"label":317,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":318,"questions":319,"sections":339},"fbb04b3a-95ca-401d-ad4c-067cc09919c7","interventions-by-the-dpo","Intervention(s) by the DPO","\u003Ch2>\u003C/h2>",[320,326,333],{"id":321,"slug":322,"label":323,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":324,"displayConditions":9,"answers":325,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"1a81f952-d58b-4643-b72d-c63ffef2bf2d","trace-the-consultations-carried-out-by-the-dpo-on-the-formalities-to-be-completed-during-the-year","Trace the consultations carried out by the DPO on the formalities to be completed during the year",[],[],{"id":327,"slug":328,"label":329,"tooltipHtml":9,"descriptionHtml":330,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":331,"displayConditions":9,"answers":332,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"9c12c53d-f93d-4305-ac03-1e8591069b51","has-management-followed-the-dpos-recommendations","Has management followed the DPO's recommendations?","\u003Cp>This question requires detailed indication of the follow-up rate of recommendations, as well as details for each recommendation.\u003C/p>",[],[],{"id":334,"slug":335,"label":336,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":337,"displayConditions":9,"answers":338,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"10b248a8-3a42-46e6-aa21-7564a6b31f20","were-any-mediations-necessary-during-the-year-if-so-on-what-subject","Were any mediations necessary during the year? If so, on what subject?",[],[],[],{"id":341,"slug":342,"label":343,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":344,"sections":376},"ecac6e77-0a67-4806-bf6e-ef06865f8605","activities-needing-an-expertise","Activities requiring expertise",[345,352,358,364,370],{"id":346,"slug":347,"label":348,"tooltipHtml":9,"descriptionHtml":349,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":350,"displayConditions":9,"answers":351,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"0b4e2b02-797b-419c-92e1-d79b4347c3c0","how-are-sensitive-files-handled","How are sensitive files handled?","\u003Cp>Concerning highly personal or sensitive data. \u003C/p>",[],[],{"id":353,"slug":354,"label":355,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":356,"displayConditions":9,"answers":357,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"e234376a-03b3-47fd-830f-52d8ab2e110a","what-are-the-criteria-and-modalities-for-the-takeover-of-sensitive-data-within-the-organization","What are the criteria and modalities for the takeover of sensitive data within the organization?",[],[],{"id":359,"slug":360,"label":361,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":362,"displayConditions":9,"answers":363,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"b39500c1-f2e4-4a9b-bd58-7eac0662b9fe","do-cross-border-flows-exist","do cross-border flows exist?",[],[],{"id":365,"slug":366,"label":367,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":368,"displayConditions":9,"answers":369,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"005d0fa6-9216-422c-9d43-953876866e0a","are-there-file-interconnections","Are there file interconnections?",[],[],{"id":371,"slug":372,"label":373,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":374,"displayConditions":9,"answers":375,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"bd8640fa-2ca6-44c4-a1d7-d86433c1ea14","is-there-automated-decision-making-including-profiling","Is there automated decision making, including profiling?",[],[],[],{"id":378,"slug":379,"label":380,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":381,"sections":382},"3e9927b2-cfe8-4cb1-b5b3-69ab6afa44c6","--1","Responses to internal and external requests",[],[383,432,499,552,588,630,661],{"id":384,"slug":385,"label":386,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":387,"questions":388,"sections":431},"abe3da99-40c7-4019-ad52-dc93a72a7718","right-of-access","right of access","\u003Cp>Article 15§1 GDPR: The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data relating to him or her are being processed and, where they are, access to such personal data [...].\u003C/p>",[389,401,407,413,419,425],{"id":390,"slug":391,"label":392,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":63,"typeIndex":64,"typeColor":9,"typeIcon":9,"typeText":65,"dynamicSelectType":9,"editableOptions":28,"complianceRules":393,"displayConditions":9,"answers":394,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"659aecc0-8786-4b88-96bc-baf03199d200","were-there-any-data-access-requests-during-the-year","Were there any data access requests during the year?",[],[395,398],{"id":396,"color":70,"rangeValue":9,"label":71,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":397},"1db35383-e505-423e-b515-6a1c2d6bbfc4",[],{"id":399,"color":70,"rangeValue":9,"label":75,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":400},"03a1c4cb-d10c-4e47-82ba-1e97ea283d08",[],{"id":402,"slug":403,"label":404,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":190,"typeIndex":191,"typeColor":9,"typeIcon":9,"typeText":190,"dynamicSelectType":9,"editableOptions":28,"complianceRules":405,"displayConditions":9,"answers":406,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"5aeaefbc-8fc0-4e03-be7c-5d7c391f582a","what-is-the-number-of-requests-for-right-of-access-to-personal-data","What is the number of requests for right of access to personal data?",[],[],{"id":408,"slug":409,"label":410,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":411,"displayConditions":9,"answers":412,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"c973710f-5b9f-42f9-b622-47ca2791b00b","were-the-requests-for-access-rights-processed-within-the-legal-deadline","Were the requests for access rights processed within the legal deadline?",[],[],{"id":414,"slug":415,"label":416,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":417,"displayConditions":9,"answers":418,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"55e766d4-59fb-473f-88ad-4f1562e9c53b","are-any-requests-being-processed-","Are any requests being processed?",[],[],{"id":420,"slug":421,"label":422,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":423,"displayConditions":9,"answers":424,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"b9b047b9-d9ee-4bcd-b127-b6d1bfafd681","have-reasonable-charges-been-made-to-the-data-subject-for-a-request-for-an-additional-copy-of-the-data","Have (reasonable) charges been made to the data subject for a request for an additional copy of the data?",[],[],{"id":426,"slug":427,"label":428,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":429,"displayConditions":9,"answers":430,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"4390b1c2-b568-4d7c-808e-0f00d22764f6","is-there-remote-access-to-a-secure-system-allowing-the-data-subject-direct-access-to-hisher-data","Is there remote access to a (secure) system allowing the data subject direct access to his/her data?",[],[],[],{"id":433,"slug":434,"label":435,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":436,"questions":437,"sections":498},"824fbed2-0365-4be2-93a3-24756b4df0f6","right-to-modify-delete-personal-data","Right to modify/delete personal data","\u003Cp>Article 16 GDPR: The data subject shall have the right to obtain from the controller, as soon as possible, the rectification of inaccurate personal data concerning him or her. Having regard to the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement.\u003C/p>\u003Cp>Article 17§1 GDPR: The data subject has the right to obtain from the controller the erasure, as soon as possible, of personal data concerning him or her and the controller has an obligation to erase such personal data as soon as possible [...].\u003C/p>",[438,444,450,456,462,468,474,480,486,492],{"id":439,"slug":440,"label":441,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":442,"displayConditions":9,"answers":443,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"4b2203a7-69e5-4e43-a406-7f104e4bf1fc","were-there-any-requests-for-data-rectification-during-the-year","Were there any requests for data rectification during the year?",[],[],{"id":445,"slug":446,"label":447,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":448,"displayConditions":9,"answers":449,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"aaa0eb25-6ed3-4ff9-9f17-c3d47c4b4397","were-there-any-requests-for-data-erasure-during-the-year","Were there any requests for data erasure during the year?",[],[],{"id":451,"slug":452,"label":453,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":190,"typeIndex":191,"typeColor":9,"typeIcon":9,"typeText":190,"dynamicSelectType":9,"editableOptions":28,"complianceRules":454,"displayConditions":9,"answers":455,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"408fd053-49fe-47fa-b8eb-6d5cbcc99498","what-is-the-number-of-data-rectification-requests","What is the number of data rectification requests?",[],[],{"id":457,"slug":458,"label":459,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":190,"typeIndex":191,"typeColor":9,"typeIcon":9,"typeText":190,"dynamicSelectType":9,"editableOptions":28,"complianceRules":460,"displayConditions":9,"answers":461,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"50a01303-7f52-427a-b4d3-0589c1d223e4","what-is-the-number-of-data-deletion-requests","What is the number of data deletion requests?",[],[],{"id":463,"slug":464,"label":465,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":466,"displayConditions":9,"answers":467,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"6614fac0-be24-4dca-9b43-b6335e8e8c37","have-rectification-requests-been-processed-within-the-legal-delay-","Have the rectification requests been processed within the legal deadline?",[],[],{"id":469,"slug":470,"label":471,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":472,"displayConditions":9,"answers":473,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"bead62dd-96e9-49e7-9333-7966b883bd47","have-requests-been-processed-within-the-legal-delay-","Have deletion requests been processed within the legal deadline?",[],[],{"id":475,"slug":476,"label":477,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":478,"displayConditions":9,"answers":479,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"f29418f0-c476-4256-806d-d114bdeddb7a","are-any-rectification-requests-being-processed","Are any rectification requests being processed?",[],[],{"id":481,"slug":482,"label":483,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":484,"displayConditions":9,"answers":485,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"779c1a96-5795-4584-b80c-4f75d8b32efe","are-any-deletion-requests-being-processed","Are any deletion requests being processed?",[],[],{"id":487,"slug":488,"label":489,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":490,"displayConditions":9,"answers":491,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"78694544-4fe4-4f64-9bd7-d04b816f7b4e","have-the-rectifications-been-notified-to-the-recipients-to-whom-the-data-was-communicated","Have the rectification(s) been notified to the recipients to whom the data was communicated?",[],[],{"id":493,"slug":494,"label":495,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":496,"displayConditions":9,"answers":497,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"a3998135-f5b2-461a-b491-6326a69849da","have-any-deletion-requests-been-refused-if-so-for-what-reasons","Have any deletion requests been refused? If so, for what reason(s)?",[],[],[],{"id":500,"slug":501,"label":502,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":503,"sections":551},"a46c4469-13aa-4077-aab8-9b1c8b5c13da","right-to-processing-activity-limitation","Right to processing activity limitation",[504,510,516,522,528,533,539,545],{"id":505,"slug":506,"label":507,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":508,"displayConditions":9,"answers":509,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"927fa3cb-44d6-47db-a268-8d9dc1fbebbf","were-there-any-requests-for-processing-activity-limitation-during-the-year","Were there any requests for processing activity limitation during the year?",[],[],{"id":511,"slug":512,"label":513,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":190,"typeIndex":191,"typeColor":9,"typeIcon":9,"typeText":190,"dynamicSelectType":9,"editableOptions":28,"complianceRules":514,"displayConditions":9,"answers":515,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"624785ce-d777-4c3c-912a-00cd50c06c92","what-is-the-number-of-requests-for-the-right-to-restrict-processing","What is the number of requests for the right to restrict processing?",[],[],{"id":517,"slug":518,"label":519,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":520,"displayConditions":9,"answers":521,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"ce22f115-8158-450a-bf11-e427d112636b","for-what-reasons-has-the-organization-limited-data-processing-gdpr-art-18-§1","For what reason(s) has the organization limited data processing (GDPR, art. 18, §1)",[],[],{"id":523,"slug":524,"label":525,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":526,"displayConditions":9,"answers":527,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"43bdd424-dd61-487e-941d-73bd0fab0776","have-requests-for-the-right-to-restrict-processing-been-processed-within-the-legal-time-limit","Have requests for the right to restrict processing been processed within the legal time limit?",[],[],{"id":529,"slug":530,"label":416,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":531,"displayConditions":9,"answers":532,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"44560dfa-4355-40b1-8c6e-539741230cc8","_001",[],[],{"id":534,"slug":535,"label":536,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":537,"displayConditions":9,"answers":538,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"15288848-7ba2-49d8-98f8-9125b40b5d2a","have-any-limitation-requests-been-refused-if-so-for-what-reasons","Have any limitation requests been refused? If so, for what reason(s)?",[],[],{"id":540,"slug":541,"label":542,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":543,"displayConditions":9,"answers":544,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"a8d91350-b736-4224-ad6c-4d1897c1e2ef","have-the-data-recipients-been-notified-of-the-request-to-restrict-processing","Have the data recipients been notified of the request to restrict processing?",[],[],{"id":546,"slug":547,"label":548,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":549,"displayConditions":9,"answers":550,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"180a0894-2489-4611-9868-cab325ecd5b0","has-the-data-processing-activity-in-question-been-resumed-in-a-normal-manner","Has the data processing activity in question been resumed in a normal manner?",[],[],[],{"id":553,"slug":554,"label":555,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":556,"questions":557,"sections":587},"4ad2e756-7d54-45ef-b87b-40b74f4ae7e2","right-to-portability","Right to portability","\u003Cp>The right to portability allows the data subject to receive all the personal data held about him or her by a controller and/or to transmit it to another controller (GDPR, Article 20).\u003C/p>",[558,564,570,576,581],{"id":559,"slug":560,"label":561,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":562,"displayConditions":9,"answers":563,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"43728153-2f80-4a95-9c68-d9b4294062b6","were-there-any-requests-for-the-right-to-portability-during-the-year","Were there any requests for the right to portability during the year?",[],[],{"id":565,"slug":566,"label":567,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":190,"typeIndex":191,"typeColor":9,"typeIcon":9,"typeText":190,"dynamicSelectType":9,"editableOptions":28,"complianceRules":568,"displayConditions":9,"answers":569,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"442cec26-7c66-4d9e-9179-5970ae7609e8","what-is-the-number-of-requests-for-the-right-to-portability","What is the number of requests for the right to portability?",[],[],{"id":571,"slug":572,"label":573,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":574,"displayConditions":9,"answers":575,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"84496628-9b8d-4673-ba42-5f50238fefeb","have-the-requests-for-the-right-to-portability-been-processed-within-the-legal-deadline","Have the requests for the right to portability been processed within the legal deadline?",[],[],{"id":577,"slug":578,"label":416,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":579,"displayConditions":9,"answers":580,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"9ee07331-82cd-421d-96e9-1eb1a330d22b","_002",[],[],{"id":582,"slug":583,"label":584,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":585,"displayConditions":9,"answers":586,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"c95eae0b-746f-4137-abf9-ea2afba331e2","have-any-requests-for-the-right-to-portability-been-refused-if-so-for-what-reasons","Have any requests for the right to portability been refused? If so, for what reason(s)?",[],[],[],{"id":589,"slug":590,"label":591,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":592,"questions":593,"sections":629},"cd521dd0-65b8-4e7e-977a-c38534ca142c","opposition-right","Opposition right","\u003Cp>Article 21§1 GDPR: The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her based on Article 6, paragraph 1, point e) or f), including profiling based on those provisions. The controller shall no longer process the personal data, unless it can demonstrate compelling legitimate grounds for the processing which override the interests and rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.\u003C/p>",[594,606,612,618,623],{"id":595,"slug":596,"label":597,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":63,"typeIndex":64,"typeColor":9,"typeIcon":9,"typeText":65,"dynamicSelectType":9,"editableOptions":28,"complianceRules":598,"displayConditions":9,"answers":599,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"225b0d18-6c89-4d81-a1c3-326622d1f0dd","were-there-any-right-of-objection-requests-during-the-year","Were there any right of objection requests during the year?",[],[600,603],{"id":601,"color":70,"rangeValue":9,"label":71,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":602},"6f8d1218-06f1-49cb-9a82-0ba5799bea4d",[],{"id":604,"color":70,"rangeValue":9,"label":75,"slug":9,"description":9,"score":9,"nonApplicable":28,"tooltip":9,"goodAnswer":28,"redFlag":28,"impact":9,"probability":9,"taskSuggestions":605},"63d83c2b-15b3-4d5b-a2c0-7d210f0479ee",[],{"id":607,"slug":608,"label":609,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":190,"typeIndex":191,"typeColor":9,"typeIcon":9,"typeText":190,"dynamicSelectType":9,"editableOptions":28,"complianceRules":610,"displayConditions":9,"answers":611,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"bb60c1fa-b056-46f7-bc5e-7afdfdfbcaa8","what-is-the-number-of-requests-for-the-right-to-object","What is the number of requests for the right to object?",[],[],{"id":613,"slug":614,"label":615,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":616,"displayConditions":9,"answers":617,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"64bd101e-523e-4124-aa44-4bfbc242ea8b","were-the-requests-for-the-right-to-object-processed-within-the-legal-deadline","Were the requests for the right to object processed within the legal deadline?",[],[],{"id":619,"slug":620,"label":416,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":621,"displayConditions":9,"answers":622,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"299da6b0-09dd-49b5-b7ac-40bf28dd5506","are-any-requests-being-processed",[],[],{"id":624,"slug":625,"label":626,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":627,"displayConditions":9,"answers":628,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"6c3333de-a4f7-4099-9002-0ff767045d9e","have-any-requests-for-the-right-to-object-been-refused-if-so-for-what-reasons","Have any requests for the right to object been refused? If so, for what reason(s)?",[],[],[],{"id":631,"slug":632,"label":633,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":634,"questions":635,"sections":660},"fab4cbb6-c4d0-4238-b623-c43f61ada6e2","fate-of-data-after-death","Fate of data after death","\u003Cp>The fate of data after the death of the data subject is governed by the local jurisdiction, since Recital 27 of the GDPR states that This Regulation shall not apply to the personal data of deceased persons. Member States may provide for rules relating to the processing of personal data of deceased persons.\u003C/p>",[636,642,648,654],{"id":637,"slug":638,"label":639,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":640,"displayConditions":9,"answers":641,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"5c913bb2-3173-43dc-96c1-7f703dbb83c4","are-there-any-directives-general-or-specific-issued-by-the-person-concerned","Are there any directives (general or specific) issued by the person concerned?",[],[],{"id":643,"slug":644,"label":645,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":646,"displayConditions":9,"answers":647,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"af9c0cf6-6f82-4769-9c0e-7d136da3dea8","have-the-heirs-exercised-the-rights-guaranteed-by-law-after-the-death-of-the-person-concerned","Have the heirs exercised the rights guaranteed by law after the death of the person concerned?",[],[],{"id":649,"slug":650,"label":651,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":652,"displayConditions":9,"answers":653,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"36f84856-853c-48b1-b130-7bec17bc0ffc","has-the-organization-made-the-heirs-aware-of-the-data-information-of-the-person-concerned","Has the organization made the heirs aware of the data information of the person concerned?",[],[],{"id":655,"slug":656,"label":657,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":658,"displayConditions":9,"answers":659,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"f58ed7eb-81ab-47d2-b9ff-65daa5c083a9","is-there-a-mechanism-allowing-data-subjects-to-give-instructions-on-the-fate-of-their-data-after-death","Is there a mechanism allowing data subjects to give instructions on the fate of their data after death? ",[],[],[],{"id":662,"slug":663,"label":664,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":665,"sections":672},"0dfd2277-a7cf-49c2-ad2a-eba25669871d","complaints-and-claims","Complaints and claims",[666],{"id":667,"slug":668,"label":669,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":670,"displayConditions":9,"answers":671,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"0fd522cb-5207-47b2-9664-93c91744c9d0","were-there-any-complaints-and-claims-during-the-year","Were there any complaints and claims during the year?",[],[],[],{"id":674,"slug":675,"label":676,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":677,"sections":678},"70d527cb-df92-45ab-9a5c-6213e1dc30db","audit-and-control","Audit and control",[],[679,723,759],{"id":680,"slug":681,"label":682,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":683,"questions":684,"sections":722},"b63007d9-4a5a-4e81-a464-b38afebc5472","data-protection-impact-assessment-dpia","Data Protection Impact Assessment (DPIA)","\u003Cp>The DPIA is a process whose purpose is to describe the processing, assess the need for it and help manage the risks to the rights and freedoms of data subjects, by evaluating the measures needed to address them.\u003C/p>",[685,691,698,704,710,716],{"id":686,"slug":687,"label":688,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":689,"displayConditions":9,"answers":690,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"52f29432-c37f-4c70-b6d2-8a7fe44981f8","has-a-dpia-been-established","Has a DPIA been established?",[],[],{"id":692,"slug":693,"label":694,"tooltipHtml":9,"descriptionHtml":695,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":696,"displayConditions":9,"answers":697,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"8f6bf3f9-80f3-4d80-b090-00c77ffb658c","what-are-the-types-of-processing-operations-implemented-by-the-organization-requiring-an-aipd","What are the types of processing operations implemented by the organization, requiring an AIPD?","\u003Cp>According to the list(s) adopted by the local data protection authorities\u003C/p>",[],[],{"id":699,"slug":700,"label":701,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":702,"displayConditions":9,"answers":703,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"9f983def-f4e1-41c5-84ca-fef0daf425ac","have-any-processing-operations-implemented-before-the-gdpr-came-into-force-been-subject-to-a-dpia","Have any processing operations implemented before the GDPR came into force been subject to a DPIA?",[],[],{"id":705,"slug":706,"label":707,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":708,"displayConditions":9,"answers":709,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"63b0dec7-876f-4bed-9155-0cae246e9366","in-the-case-where-a-dpia-has-been-established-are-there-any-points-that-need-to-be-reviewed-or-clarified","In the case where a DPIA has been established, are there any points that need to be reviewed or clarified?",[],[],{"id":711,"slug":712,"label":713,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":714,"displayConditions":9,"answers":715,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"453b6c72-c3ea-4f72-8aae-7ba48e74a0c2","has-the-local-data-protection-authority-been-consulted-for-the-dpia","Has the local data protection authority been consulted for the DPIA?",[],[],{"id":717,"slug":718,"label":719,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":720,"displayConditions":9,"answers":721,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"088a42b6-db36-406b-8f2e-b83164f3671e","has-the-data-protection-impact-assessment-dpia-been-published","Has the data protection impact assessment (DPIA) been published?",[],[],[],{"id":724,"slug":725,"label":726,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":727,"sections":758},"dcfdb8e7-8075-434f-b679-7b3afe2d23fb","control","Control",[728,734,740,746,752],{"id":729,"slug":730,"label":731,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":732,"displayConditions":9,"answers":733,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"9ab215f1-a98a-4863-8274-f0eabf159e4f","have-security-measures-been-taken-to-ensure-data-integrity-and-availability-if-so-which-ones","Have security measures been taken to ensure data integrity and availability? If so, which ones?",[],[],{"id":735,"slug":736,"label":737,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":738,"displayConditions":9,"answers":739,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"a1f5a878-3b59-41a5-86b0-a68e6f1f70c9","is-there-evidence-of-implementation-of-secure-development-practices","Is there evidence of implementation of secure development practices?",[],[],{"id":741,"slug":742,"label":743,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":744,"displayConditions":9,"answers":745,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"b385f3ed-2630-451f-9766-f9dc177d5114","has-the-organization-anonymized-the-data","Has the organization anonymized the data?",[],[],{"id":747,"slug":748,"label":749,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":750,"displayConditions":9,"answers":751,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"300a1302-9015-47c8-8424-e426a1a4cf9d","has-there-been-one-or-more-data-violations-during-the-lane-","Was there one or more data breaches during the year?",[],[],{"id":753,"slug":754,"label":755,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":756,"displayConditions":9,"answers":757,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"6be2c4a7-61cc-4971-a6f3-8db2bcf9934f","in-the-event-of-a-data-breachs-have-the-persons-concerned-been-informed-within-the-legal-time-limit","In the event of a data breach(s), have the persons concerned been informed within the legal time limit?",[],[],[],{"id":760,"slug":761,"label":762,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":763,"questions":764,"sections":771},"40e9e317-1358-4b87-9f98-a5146588a98a","action-plan-for-the-coming-year","Action plan for the coming year","\u003Cp>The document can close with a perspective and a description of the action plan for the coming year(s). As an example, the review should include a reminder of the deadline for carrying out AIPs on certain processing activities implemented.\u003C/p>",[765],{"id":766,"slug":767,"label":768,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":769,"displayConditions":9,"answers":770,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"458c54b1-62a7-43e1-908c-726f38a450b0","is-there-an-action-plan-for-the-coming-year-detail","Is there an action plan for the coming year? Detail.",[],[],[],{"id":773,"slug":774,"label":775,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":776,"sections":777},"9d8a36ae-2481-47e7-a2cf-6038ba40468c","external-relations","External relations",[],[778,820,850],{"id":779,"slug":780,"label":781,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":782,"sections":819},"0ad20d67-f3ea-46a7-8a77-faed23229e79","data-protection-authorities","Data protection authorities",[783,789,795,801,807,813],{"id":784,"slug":785,"label":786,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":787,"displayConditions":9,"answers":788,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"af151f4a-51ca-4722-a1d3-16a97ae0381f","have-controls-been-carried-out-by-the-local-data-protection-authorities","Have controls been carried out by the local data protection authorities?",[],[],{"id":790,"slug":791,"label":792,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":793,"displayConditions":9,"answers":794,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"f2ef940c-95aa-4511-828c-e145ed2e443d","have-the-local-data-protection-authorities-been-notified-data-subjects-dpo-etc","Have the local data protection authorities been notified (data subjects, DPO, etc.)?",[],[],{"id":796,"slug":797,"label":798,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":799,"displayConditions":9,"answers":800,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"6d8aa6cc-af2b-4d12-89cd-91179b32d468","have-local-data-protection-authorities-been-asked-for-advice","Have local data protection authorities been asked for advice?",[],[],{"id":802,"slug":803,"label":804,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":805,"displayConditions":9,"answers":806,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"a1d98f4b-bc7a-435d-beb8-dcb77a58a5a0","have-local-data-protection-authorities-been-consulted-under-article-36-of-the-gdpr","Have local data protection authorities been consulted under Article 36 of the GDPR?",[],[],{"id":808,"slug":809,"label":810,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":811,"displayConditions":9,"answers":812,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"9dd685e9-e4ca-43f5-a67c-78406b5248ff","have-local-data-protection-authorities-been-notified-of-one-or-more-data-breaches-within-the-legal-timeframe","Have local data protection authorities been notified of one or more data breaches within the legal timeframe?",[],[],{"id":814,"slug":815,"label":816,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":817,"displayConditions":9,"answers":818,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"861ce797-b2be-4383-abae-4deb5ae7e492","have-the-workshops-proposed-by-the-data-protection-authorities-been-followed-by-the-organization-the-dpo","Have the workshops proposed by the data protection authorities been followed by the organization / the DPO?",[],[],[],{"id":821,"slug":822,"label":823,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":824,"sections":849},"21abf0a0-e0dd-44f8-9dea-1b4e0bff6c46","delegation-of-processing","Delegation of processing",[825,831,837,843],{"id":826,"slug":827,"label":828,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":829,"displayConditions":9,"answers":830,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"73dac7b1-3e33-41dd-aa06-35b21b57e796","does-the-organization-use-one-or-more-subcontractors","Does the organization use one or more subcontractors?",[],[],{"id":832,"slug":833,"label":834,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":835,"displayConditions":9,"answers":836,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"435fc567-1a5b-4213-bb1f-e88c7b4a6270","does-the-subcontractor-present-sufficient-guarantees-","Does the subcontractor present sufficient guarantees?",[],[],{"id":838,"slug":839,"label":840,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":841,"displayConditions":9,"answers":842,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"a1ec0151-fdfd-47df-b55d-58475aa88f7f","does-the-organization-ensure-that-the-subcontractor-complies-with-the-gdpr","Does the organization ensure that the subcontractor complies with the GDPR?",[],[],{"id":844,"slug":845,"label":846,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":847,"displayConditions":9,"answers":848,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"ac0032f9-7b7c-4956-ac83-dddf61411323","is-the-contract-between-the-organization-and-the-subcontractor-still-valid","Is the contract between the organization and the subcontractor still valid? ",[],[],[],{"id":851,"slug":852,"label":853,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":854,"questions":855,"sections":862},"c3fc5412-dba4-435f-b4e8-069f5f4438a3","other-relationships","Other relationships","\u003Cp>This section concerns all other relationships, such as a DPO association to which the professional has joined (conferences attended, participation in meetings or in the design of deliverables, etc.) or a professional association (security, risk management, archiving, etc.) and to any exchanges with DPOs in his/her sector of activity.\u003C/p>",[856],{"id":857,"slug":858,"label":859,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":860,"displayConditions":9,"answers":861,"listQuestions":9,"required":28,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"707f8670-c6f7-4fdd-ade6-ece8c02e3159","exists-other-external-relationships-detail-","Are there any other external relationships? Detail.",[],[],[],{"id":864,"slug":865,"label":866,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":867,"sections":868},"33657561-17fb-42a6-8aa0-f763752a6b44","estimated-workload","Estimated workload",[],[869,881,893],{"id":870,"slug":871,"label":872,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":873,"sections":880},"7c03f79f-3395-4a2b-9853-cdc842a148b8","time-spent-quantitative","Time spent (quantitative)",[874],{"id":875,"slug":876,"label":877,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":878,"displayConditions":9,"answers":879,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"ae94d9be-6ce2-48a5-afc0-ce9a30aa31c6","detail-time-spent-on-dpo-work","Detail time spent on DPO work.",[],[],[],{"id":882,"slug":883,"label":884,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":885,"sections":892},"75ec9fc0-7b39-4629-a6d7-6de30fac0d7a","workload-qualitative","Workload (qualitative)",[886],{"id":887,"slug":888,"label":889,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":890,"displayConditions":9,"answers":891,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"d6a6cfd2-da35-4816-a0dc-cadfd217677b","detail-the-workload-on-the-qualitative-level","Detail the workload on the qualitative level.",[],[],[],{"id":894,"slug":895,"label":896,"emoji":9,"type":10,"typeIndex":11,"typeColor":9,"typeIcon":9,"typeText":12,"descriptionHtml":9,"questions":897,"sections":904},"c91df28c-395a-449e-8bdc-829ae57e44bb","budget-and-means","Budget and means",[898],{"id":899,"slug":900,"label":901,"tooltipHtml":9,"descriptionHtml":9,"badResponseCommentHtml":9,"goodResponseCommentHtml":9,"placeholder":9,"min":9,"max":9,"regex":9,"unit":9,"type":25,"typeIndex":26,"typeColor":9,"typeIcon":9,"typeText":27,"dynamicSelectType":9,"editableOptions":28,"complianceRules":902,"displayConditions":9,"answers":903,"listQuestions":9,"required":31,"requiredJustification":28,"suggestTask":28,"riskEnabled":31,"native":28},"ec7ad707-593b-4be4-8745-548b590c35d4","detail-the-budget-requirements-and-the-means-necessary-for-the-successful-completion-of-the-dpos-work","Detail the budget requirements and the means necessary for the successful completion of the DPO's work.",[],[],[],[],"f6f2c529-18e8-43af-3721-08dc007f9cb7","1.0","DPO annual activity report","pRVUBO8R0f62J27UlXcAdeWRghOxsphdplG4XpYdEJftvScqNWuMZepVvSWS",4,"https://static.dastra.eu/tenant-3/audit/ARLTSNoj7MR2Do/questionnaire-150.png","The annual review enables the DPO to report any difficulties to the data controller, to obtain resources, and to trace his actions over the years. ",1,"2023-12-19T17:37:37.5828296","2024-08-29T12:40:12.0444184","Standard",{"id":918,"displayName":919,"familyName":920,"givenName":921,"email":922,"active":31,"color":923,"avatarUrl":924,"tenantId":11},38,"Paul-Emmanuel Bidault","Bidault","Paul-Emmanuel","paulemmanuel.bidault@dastra.eu","#FA4115","https://static.dastra.eu/tenant-27/avatar/38/paul-emmanuel-bidault-150.jpg",[926],{"id":918,"displayName":919,"familyName":920,"givenName":921,"email":922,"active":31,"color":923,"avatarUrl":924,"tenantId":11},[928],{"id":929,"label":930,"type":931,"typeIndex":932,"typeColor":933,"typeIcon":934,"typeText":935,"color":936},"44865061-f84e-4945-bcd2-515e96349eff","DPO","AuditTemplate",9,"#83d162","ds-icon-audit","Questionnaire template","#0973F5",99,40]