How do you document data access for employees?

The law does not directly state how the employer ensures that employees do not unlawfully process data. In this case, the employer must provide written rules which forbid data processing and instruct the employees to sign it. Likewise, you can regularly check the databases used within the company and ensure that they do not contain unlawfully stored personal data. All companies performing personal data processing must have internal instructions on securing data processing, which regulate which actions related to personal data processing employees are allowed to perform. The company must be able to determine which employees and when have accessed personal data, and what actions have they performed with these data.