Self-identification,
Appointment of an Information Security Officer
The official registration of direct data subjects must be done via a client portal (SZTFH)
Notification of subcontractors involved in IT Operations
Organisation providing the electronic communications service requested (e.g. internet service provider)
The protection mechanisms put in place must be applied
Operate an IBIR system in the organisation
Contract with an auditing organisation from a list published by the authority
The first audit should be carried out during the year.