31 karma · joined February 25, 2018
The realistic answer is that you deliver the news to your team during your one on ones, explain the matter was not in your hands, and move on. If someone leaves over pay (which is reasonable) but you do not control pay, then it's not on you.
Don't be too hard on yourself.
"1 - The controller shall provide a copy of the personal data undergoing processing. 2- For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs."
Edit - and to speak more to the topic at hand, there were plenty of people at the firm I worked with who absolutely had the technical expertise to perform such an in depth audit. They are simply engaged when higher levels of assurance are required. What level of scrutiny should your auditors provide your bathroom time monitoring system?