In order to easily comply with the AVG and the associated processing of sensitive information, there is the menu item “Processing register. Here all information can be registered and linked to a process, if desired. This designation can be found in the print of the relevant process, as well as the document classification, which is also a new functionality within the Process Manager. Linking information can be done by clicking on “Process specific data” at the top right of the screen behind the processing register menu button. When registering the processing of data, extensive information can be entered:
Processor / controller
Are you the processor or data controller?
Type
What is the type of data?
Stakeholders?
Who is responsible for the data?
Purpose
For which purposes do you process the data?
Shared with
With which parties did you share the data?
Legal bases?
What legal bases do you store the data with?
Retention period
How long must the data be stored?
Security measures
What security measures do you use?
Countries
To which countries do you export the data?
Processing agreement
Has a processing agreement been concluded?
Appropriate guarantees (Article 49 AVG)
If you wish to export data, but you cannot rely on a model contract, Binding Corparate Rules, Privacy Shield, permission or vital interest of data subjects, need for your own interest or legal claim, you can request exemption.
Data breach agreements
Has a data breach agreement been concluded?
DPIA performed
Have you performed a DPIA (Data Protection Impact Assessment)?
Process
Which process is linked to this data?