When personal data are processed, who is ultimately responsible for demonstrating compliance with the GDPR?
The Control Authority may impose fines on organizations that are not meeting the mandatory requirements of the General Data Protection Regulation (GDPR).