andmesalvestuslehti

Andmesalvestuslehti is a term used in Estonian to denote a document or data form that records information about data storage practices within an organization. Literally translated, it combines andmed (data), salvestus (storage), and leht (sheet). The term is not universally standardized and its exact use can vary between organizations.

Purpose and scope

The primary purpose of an andmesalvestuslehti is to document how data is stored, managed, and protected. It supports data governance by detailing what data is stored, where it is stored, retention periods, and the purposes for which the data is held. The document is often used to support compliance with data protection requirements, such as the EU General Data Protection Regulation (GDPR), by clarifying data ownership, legal basis, access rights, and security measures.

Contents

A typical andmesalvestuslehti includes: data category and description; storage location(s) and medium; data flow and dependencies; retention and deletion rules; legal basis and purposes; access controls and user responsibilities; data transfer or cross-border storage; encryption and backup practices; audit trails and change history; and the data steward or responsible person.

Formats and usage

An andmesalvestuslehti can be maintained in paper form or as part of an electronic data inventory or data management system. It often complements other governance documents such as registers of data processing activities and data protection impact assessments, serving as a practical record of how data is stored and protected throughout its lifecycle.

See also

Data protection register, GDPR, data governance, data lifecycle management.