c) Assignment of responsibilities, awareness-raising and training of members of staff involved in processing operations d) To provide advice where requested as regards the data protection impact assessment and monitor its performance e) To cooperate with the NITDA as the Supervisory Authority f) To act as the contact point for the NITDA on issues relating to data processing Is there a clearly available mechanism (e.g. webpage, 2.3 Article 2.5 etc.) for data subjects that explains how to contact your organisation to pursue issues relating to personal data? 3 3.1 DOCUMENTATION TO DEMONSTRATE COMPLIANCE Article 3.1 Have you documented your data processing activities? Have you included an appropriate privacy notice in 3.2 Article 2.5 each data collection process, including those done through third parties? Article 4.1(5) Have you agreed a schedule to review current privacy notices contracts for compliance with NDPR? Other than the grounds of Consent of an employee, 3.3 Article 2.2 has your organisation recorded other legal grounds on which it processes its employees' data? 3.4 Article 4.1(5) Have you identified what personal data is collected and whether this is collected directly from the data subject or via a third party? Article 3.1(7) 3.5 Article 1.3 Does this inventory include data retention periods or do you have a separate data retention schedule? Do you have a register of data breaches and security incidents? 4 PROCESSING ACTIVITIES Have you carried out a comprehensive review of the 4.1 Article 2.2 various types of processing your organisation 33 | P a g e