Accountability management

Accountability is one of the key new ideas introduced by the GDPR, and one of its core principles. It can be summed up simply: an organisation that processes personal data must be able to demonstrate, at first request of the authorities, that it complies with GDPR requirements.

This represents a major challenge for organisations. Above and beyond strict compliance with the law, it means proving to customers, service providers and prospects that the organisation is reliable and observes the full range of principles relating to personal data protection and individual rights and freedoms (protection of individual rights, prevention and management of data breaches, data security, personal data processing, etc.).

To comply with the accountability principle, an organisation must develop, document and implement processes covering the main GDPR topics such as the record of processing activities, impact assessments, and management of data subject requests and data breaches.

The DPO is not the only person subject to this principle. It extends to all partners, subcontractors, employees, data controllers and others who work with the organisation.