Description of data handling
EU´s general data protection act is applied in all EU member countries since 25.5.2018.
Based on this act Lestijärvi municipality has an obligation to compile a written description of how the personal data is handled. This description is called description of processing actions.
The description is an organization´s internal document. It works as a tool for understanding the handling process of personal data and it is meant to show that the personal data is handled according to the Data Protection Legislation. The description is a relevant part of demonstrating the implementation of the act within the organization.
A supervising authority can access the lawfulness based on the description if needed. Therefore the description has to be delivered to the supervising authority if requested.