What actions need to be taken when the controller's registered address changes?
ANSWER
A change of the controller's registered address entails the need to update all data protection documentation. All documentation should be reviewed and wherever the previous address appeared, the new address should be entered, for example in the personal data protection policy, the register of processing locations, issued authorisations, etc. With regard to data subjects, it should be determined whether the current information clauses contain the controller's designation and address. If so, the clauses should also be amended and the data subjects should be informed only of the changes, in accordance with Article 13(4) GDPR. It should also be checked whether the consent clauses for personal data processing contain the address, and if so, new templates should be prepared. In respect of consents already given, there is no need to collect new ones; however, the updated information obligation (GDPR clause under Article 13 or 14) should be communicated.


