{"$schema":"https://json-schema.org/draft/2020-12/schema","title":"Designation of the data protection officer and assessment of the need for one (GDPR arts 37-39) - Belgium","description":"profile chooses the document: assessment = the written analysis of art. 37 with the entity's own conclusion; designation = the designation act and engagement letter (position, tasks of art. 39, undertakings of art. 38, publication). Nothing is concluded by the template: the conclusion and every answer are the entity's own.","type":"object","required":["profile","entity"],"additionalProperties":false,"properties":{"profile":{"type":"string","enum":["assessment","designation"],"description":"assessment: the written art. 37 analysis. designation: the designation and engagement letter."},"entity":{"type":"object","required":["name","address","role"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1},"legal_form":{"type":"string","minLength":1},"enterprise_number":{"type":"string","pattern":"^[01][0-9]{3}\\.[0-9]{3}\\.[0-9]{3}$"},"address":{"type":"string","minLength":1,"description":"Seat address."},"role":{"type":"string","enum":["controller","processor","both"]},"seat_region":{"type":"string","enum":["nl_region","fr_region","brussels","de_region"],"description":"Language region of the operating seat (information: no language is compared with the region)."},"group_name":{"type":"string","minLength":1}}},"assessment":{"type":"object","required":["public_body","core_activity_monitoring","core_activity_special_data","federal_authority_processing","conclusion","conclusion_reasons","assessed_on","assessed_by"],"additionalProperties":false,"properties":{"public_body":{"type":"boolean","description":"Art. 37(1)(a): the processing is carried out by a public authority or body."},"core_activity_monitoring":{"type":"string","enum":["yes","no","unsure"],"description":"Art. 37(1)(b)."},"core_activity_special_data":{"type":"string","enum":["yes","no","unsure"],"description":"Art. 37(1)(c)."},"federal_authority_processing":{"type":"string","enum":["yes","no","unsure"],"description":"Law of 30 July 2018, art. 21."},"group_single_dpo":{"type":"boolean","description":"Art. 37(2): one officer for a group."},"other_law_requires":{"type":"string","minLength":1,"description":"Art. 37(4): another provision of Union or Member State law that requires a designation."},"facts":{"type":"array","items":{"type":"string","minLength":1},"description":"The activities, scale and data categories as the entity describes them."},"conclusion":{"type":"string","enum":["designation_required","voluntary_designation","no_designation"],"description":"The entity's own conclusion; the template derives nothing from the answers."},"conclusion_reasons":{"type":"string","minLength":1},"assessed_on":{"type":"string","format":"date"},"assessed_by":{"type":"object","required":["name"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1},"function":{"type":"string","minLength":1}}},"next_review":{"type":"string","format":"date"}}},"dpo":{"type":"object","required":["kind","name","contact","qualities_statement","start_date"],"additionalProperties":false,"properties":{"kind":{"type":"string","enum":["employee","internal_with_other_functions","external_provider","group_dpo"]},"name":{"type":"string","minLength":1},"function":{"type":"string","minLength":1},"provider":{"type":"object","required":["name","enterprise_number","contract_reference"],"additionalProperties":false,"properties":{"name":{"type":"string","minLength":1},"enterprise_number":{"type":"string","pattern":"^[01][0-9]{3}\\.[0-9]{3}\\.[0-9]{3}$"},"contract_reference":{"type":"string","minLength":1}}},"contact":{"type":"object","required":["email"],"additionalProperties":false,"properties":{"email":{"type":"string","format":"email"},"postal":{"type":"string","minLength":1},"phone":{"type":"string","minLength":1}}},"qualities_statement":{"type":"string","minLength":1,"description":"Art. 37(5): why the person was chosen, in the entity's words."},"start_date":{"type":"string","format":"date"},"end_date":{"type":"string","format":"date"},"indefinite":{"type":"boolean"}},"allOf":[{"if":{"properties":{"kind":{"const":"external_provider"}},"required":["kind"]},"then":{"required":["provider"]}}]},"position":{"type":"object","required":["reports_to","resources","access_statement"],"additionalProperties":false,"properties":{"reports_to":{"type":"string","minLength":1,"description":"Art. 38(3): name or function of the highest management level."},"resources":{"type":"array","items":{"type":"string","minLength":1},"description":"Art. 38(2): time share, budget, training, tools.","minItems":1},"access_statement":{"type":"string","minLength":1,"description":"Art. 38(2): access to data and processing operations."},"other_tasks":{"type":"array","items":{"type":"string","minLength":1},"description":"Art. 38(6): other tasks and duties held."},"conflict_check_statement":{"type":"string","minLength":1,"description":"Art. 38(6): the entity's own reasoning that these tasks do not lead to a conflict of interests."},"confidentiality_reference":{"type":"string","minLength":1},"time_allocation":{"type":"string","minLength":1}},"dependentRequired":{"other_tasks":["conflict_check_statement"]}},"tasks":{"type":"object","additionalProperties":false,"properties":{"additional_tasks":{"type":"array","items":{"type":"string","minLength":1},"description":"The entity's own additions to the tasks of art. 39."},"reporting_cadence":{"type":"string","minLength":1}}},"publication":{"type":"object","required":["published_where","data_subjects_channel"],"additionalProperties":false,"properties":{"published_where":{"type":"string","minLength":1},"published_on":{"type":"string","format":"date"},"apd_communicated":{"type":"string","enum":["yes","not_yet"]},"apd_communicated_on":{"type":"string","format":"date"},"apd_reference":{"type":"string","minLength":1},"data_subjects_channel":{"type":"string","minLength":1,"description":"Art. 38(4): how data subjects reach the officer."}},"allOf":[{"if":{"properties":{"apd_communicated":{"const":"yes"}},"required":["apd_communicated"]},"then":{"required":["apd_communicated_on"]}}]},"signatures":{"type":"object","required":["entity_signatory_name","entity_signatory_title","signed_on"],"additionalProperties":false,"properties":{"entity_signatory_name":{"type":"string","minLength":1},"entity_signatory_title":{"type":"string","minLength":1},"signed_on":{"type":"string","format":"date"},"dpo_acceptance":{"type":"boolean"},"dpo_signed_on":{"type":"string","format":"date"}}}},"allOf":[{"if":{"properties":{"profile":{"const":"assessment"}},"required":["profile"]},"then":{"required":["assessment"]}},{"if":{"properties":{"profile":{"const":"designation"}},"required":["profile"]},"then":{"required":["dpo","position","publication","signatures"]}}]}