The ISPA Code of Conduct offers industries support in the practical application of the General Data Protection Regulation.

The ISPA has drawn up rules of conduct for the implementation of the General Data Protection Regulation ("GDPR Code of Conduct for ISPs"). These specifically serve to work out the industry-specific characteristics resulting from sector-specific regulations such as the Telecommunications Act and to specify the concrete data protection requirements and obligations for operators. This is intended to create more legal certainty.

The Code of Conduct was approved with the proviso that the supervisory body for compliance with the rules of conduct - the Supervisory Board - is audited and successfully accredited in a separate procedure. However, such an accreditation procedure will only be carried out once the DPO ordinance pursuant to Section 21 (3) of the Data Protection Act, which is intended to define specific criteria for such supervisory bodies, has been issued.

https://www.ispa.at/wissenspool/datenschutz.html

Here you will find an overview of the current ISPA brochures.