Personal Data Processing Control System
A registry of information systems, a map of personal data flows, and processing documents in a single environment. The system supports process auditing and incident response procedures.
The task
Bring together the inventory of personal data processing, the documentation and remediation tracking in a single system.
The domain model
The register links information systems, data categories, legal grounds for processing, retention periods and transfers to contractors.
A flow map shows where data comes from, which systems it reaches and to whom it is passed on. That structure makes it possible to trace processing across everyone involved.
Working with non-conformities
The system supports audits, preparation of the remediation plan, and work with documents and the incident response procedure.
Development is combined with specialist work to document the processes: the documentation is tied to specific systems and data flows.