On April 28th, FERMA shared its thoughts on the implementation of the General Data Protection Regulation (GDPR) and feedback on the roadmap document “Report on the application of the General Data Protection Regulation”. FERMA encourages the Commission to consider a wider scope of the report and emphasises the role played by corporate governance and the use of corporate risk management methodologies to shift corporate culture towards data protection. The European Commission is expected to publish its evaluation report on the application of the GDPR on 10 June.

FERMA also attaches in annex its 2019 November report “GDPR and Corporate Governance: The Role of Internal Audit and Risk Management One Year After Implementation”.

Based on its membership of 5000 European risk managers across the European Union, many of whom are Data Protection Officers (DPO), FERMA is uniquely placed to offer valuable feedback on the implementation of the GDPR. FERMA trusts the Commission will consult the results of FERMA’s report with interest and factor these into its own report moving forward.

Read our feedback below:

FERMA Feedback to the European Commission’s Roadmap Document GDPR