• Does the organization maintain records of processing activities with some additional information regarding the purpose or scope of the activities?
• Does the organization have documentation of ongoing personal data transfers into and out of EU?
• Does the organization maintain an inventory of processes that transmit personal data to third-party service provider?
• Can the organization determine risks associated with personal data processing?
• eDiscovery enables the Data controller to run investigations for data breaches more efficiently.