From the “no matter how bad you think it is, it’s worse” department.
Breaking news from around the world.
News that is American but has an international facet may also be posted here.
These guidelines will be enforced on a know-it-when-I-see-it basis.
For US News, see the US News community.
This community’s icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.
How does GDPR mandate a public audit of the code base? Is there such a provision in it? (Not a confrontational question)
It doesn’t. You can check the full text at:
https://eur-lex.europa.eu/eli/reg/2016/679/oj
The only references to audits, are that supervisors can require an audit, processors need to allow audits by controllers, DPOs need to prepare for audits, and corporations or groups of enterprises need to have audit procedures in place.
It doesn’t say anything about what kind of audits these need to be, other than to ensure compliance with the law.
They’re just saying that if they have nothing to hide, they should prove it. Not that GDPR requires an audit.