Do use GPS tracking in your company cars? Do control your
employees in home-office by measuring keyboard or mouse activity?
You should use these devices with care, because according to the
latest guidance of the Hungarian National Authority for Data
Protection and Freedom of Information (NAIH) you might need an
impact assessment before setting up such system, to be compliant
with GDPR.
What is impact assessment?
Impact assessment is an analysis that aims to reveal the nature
of the data processing, its necessity, proportionality, and help
the risk management by measuring these risks and define activities
to handle them.
GDPR does not define exactly what this assessment should
include, we can find only some hints about what should be
definitely included: