An annual monitoring plan

1. Regulatory Concept & Core Standards

This video's topic is an annual monitoring plan. By the end, you should be able to prepare a risk-based monitoring schedule. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Distinguish case handling from general prevention governance. The coordination model and annual plan here are recommended methods. Identify the Estonian source and addressee of actual duties. Portuguese institutions and RGPC requirements are not imported into Estonia.

An annual plan is a management method, not an identical statutory form for every Estonian organisation. It should cover material risks, operating checks and legal changes. External reporting and ongoing internal monitoring are distinct.

Apply the following rule: Under section 10, acknowledge receipt within seven days of receipt, subject to express prohibition by the reporter or confidentiality-risk exceptions. Section 11 requires follow-up feedback as soon as possible and within three months of receipt. External channels may use six months in justified cases. An authority lacking competence forwards promptly, no later than the fifth working day. Acknowledgement, follow-up feedback and final-outcome feedback are separate events.

2. Practical Implementation & Procedure

Select and justify processes to check. Assign owners, dates and expected evidence. Include extraordinary review after significant events. Verify changed external duties while retaining necessary internal monitoring. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

An external report format changes. The team updates reporting but continues checking channel access and deadlines because the underlying risks remain. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Does a change to external reporting end internal monitoring needs? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

No. Their purposes and bases differ. Internal plans should still verify significant measures and reflect actual national duties.

One mistake to avoid is: assuming a removed external form ends all monitoring.

Now apply the national rule to a second decision. The platform counts 90 days from opening in every country. Does this suit Estonia?

No. Acknowledgement is generally due within seven days of receipt. Follow-up is due within three months of receipt, or six months for a justified external-channel case. Apply statutory exceptions and distinguish working from calendar days. Three months is not always 90 days and opening does not replace receipt.