Operate is a module designed to support The GDPR operational requirements and enables you to effectively manage all of your GDPR processes.
You've gathered a wealth of knowledge during your Discover phase which will support you in meeting your operational GDPR obligations.
Subject Access Requests
Article 15: Individuals have the right to access their personal data and supplementary information. The right of access allows individuals to be aware of and verify the lawfulness of the processing.
GDPR Mentor allows you to track Subject Access Requests, show where data is used from the Discover phase, and demonstrate auditable activities in the event of an audit.
Data Breach Management
GDPR states that you have 72 hours from when you become aware of a Data Breach to triage, assess the impact and report if necessary to the ICO.
GDPR Mentor allows you to track Data Breach incidents, access impact quickly by knowing where data is used from the Discover phase and automate the reporting to the ICO.
Right to Object
Article 21: Individuals have the right to object to
- processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling)
- direct marketing (including profiling)
- processing for purposes of scientific/historical research and statistics
GDPR Mentor allows you to track Object requests, communicate to system and process owners, by knowing where data is used from the Discover phase, and produce an auditable activity trail.
Right to Erasure
Article 17: Individuals have the Right to be Forgotten
- The right to erasure is also known as ‘the right to be forgotten’.
- The broad principle underpinning this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
GDPR Mentor allows you to track Erasure requests. Quickly establish the Purpose and Lawful Basis of processing to support a decision to be made, by knowing where data is used from the Discover phase, and produce an auditable activity trail.
Right to Rectification
Article 16: Individuals have the right to have personal data rectified.
Individuals are entitled to have personal data rectified if it is inaccurate or incomplete.
If you have disclosed the personal data in question to others, you must contact each recipient and inform them of the rectification, unless this proves impossible or involves disproportionate effort. If asked to you must also inform the individuals about these recipients.
GDPR Mentor allows you to track Rectification requests. Quickly establish who the data has been sent to, by knowing where data is used from the Discover phase, and produce an auditable activity trail.
Right to Data Portability
Article 20: Individuals have the right to receive a copy of their data to transfer to another service provider.
The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability.
GDPR Mentor allows you to track Portability requests. Quickly establish which systems the data is in, by knowing where data is used from the Discover phase, and produce an auditable activity trail.
Articles 13 & 14: Individuals have the right to be Informed.
The right to be informed encompasses your obligation to provide ‘fair processing information’, typically through a privacy notice.
It emphasises the need for transparency over how you use personal data.
GDPR Mentor allows you to generate Privacy Policies based on the data collected during the Discovery phase. You can create both a single policy statement and also manage contextual opt-in messages where you are collecting data directly from a data subject on a website or in paper form.
Training and Staff Awareness is a key component to GDPR compliance.
GDPR Mentor allows you to create surveys for users, distribute videos, leaflets and posters.