handling DSAR Process to record & graphically display business processes and identify personal information processed Business Process Mapping Provides a register of data to facilitate identification of data sources and corresponding attributes Data Catalogue GDPR risk assessment process DPIA Process to control data breach management reporting and incident investigation response Breach / Incident Management
key GDPR functions • Utilise extensive notifications and alerts to minimise staff effort • Provide graphical dashboards to improve co-ordination & control • Make policies & procedures available via responsive html • Give each staff member their own MyGovernance portal to boost involvement & awareness • Implement best practice on Privacy & Information Security • Utilise consistent risk assessment process for Privacy & Information security (DPIA) • Gain insight to effectiveness of GDPR programme via data aggregation across business functions • Facilitate effective record keeping • Track system usage
resource demanding • Substantial and unbudgeted fines Increased Risks • Data volumes are growing • Greater variety of data repositories • Unpredictable DSAR demand Increased Workload • DSARs require 1 month response • Staff budget is limited • DSAR responses can be complicated Increased Regulation • Mandated record keeping • Supervisory Authority can inspect • Data Subjects can launch ‘collective actions’
Subject & contacts for a DSAR can be substantial Need for Security • ‘Identity confirmation’ info to be protected in transfer & when stored • ‘found personal data’ needs to be protected (encrypted) when returned to the data subject Good record keeping • Time sensitive response required • Need to track DSAR progress • Need for significant coordination between team Technology issues • Integration within customer facing website • Electronic search & eDiscovery • Data transfers can be very large
• Collect information from data subject or requestor • Alert team of new DSAR Identify • Verify identity of data subject and/or requestor • Confirm validity of DSAR Discovery • Search for data • Collect data & redact if necessary • eDiscovery API Deliver • Send data securely to requestor
handling – Use the GPRC Hub eDiscovery API to query your own data source and retrieve the discovered material. – The DSAR manager can then check and redact if necessary before securely sending the discovered material to the requestor • Inbuilt API to various eDiscovery Solutions
eitanlees
marketingsoph
honzajavorek
erikaheidi
jct
rkendrick25
jcasabona
charlesmeaden
inesmontani
reverentgeek
trallard
chrisshort
