Municipalities, in collaboration with the IBD, Open State Foundation and Privacy Management Partners, have created a pre-filled processing register. The Excel spreadsheet allows municipalities to maintain a processing register according to art.30 of the AVG. In addition, an accompanying handbook has been published that provides additional explanation of the pre-filled processing register.
Article 30(1) AVG describes that (and consideration 82) municipalities are required to keep a processing register. The processing register lists all processing of personal data. The register may not include actual personal data.
The processing register is primarily a policy tool for the municipality itself. A good processing register:
offers administrators an overview of high-risk components of municipal information management and chain cooperation.
is explicitly or implicitly a referral index for underlying documentation.
Helps delineate the responsibilities of process owners.
Helps the FG understand the scope of his supervisory duties.
is the starting point for review and reporting by the FG to the college and council.
View excel spreadsheet Pre-completed register of processing activities
View the Handreiking Handreiking verwerkingsregister gemeenten - explanation of the pre-filled register of processing activities here
Source: Association of Netherlands Municipalities / Information Security Service for Municipalities
