4. Content Inventory
What is where?
Phase 1: Scoping
Phase 2: Discovery
Phase 3: Analysis
Patterns and sources.
Explore.
Compliance?
5. Phase 1: Scoping
Where to look and what to look for?
Identify source and
content owners.
Identify and
prioritize sources.
1 2 3
Identify patterns
to look for.
6. Phase 1: Scoping
Where to look and what to look for?
Social security number
aaa-gg-ssss
Name
Aaaaa Aaaaaaa
Phone numbers
0xx - xxxx xx xx, 0xxx xx xx xx
IP address
aaa-gg-ssss
Date of birth
YYMMDD
E-mail address
aaaaa@aaaaa.aaaaa
9. Phase 3: Analysis
o Source by source
o Processes and routines
o Legal advice
Risk and compliance
Editor's Notes
Transparenta ringar.
Discover, classify and manage information.
Datainspektionen rekommenderar är att identifiera och klassificera persondata inom organisationen:
http://www.datainspektionen.se/Documents/vagledning-forberedelser-pua.pdf
Såväl strukturerad som ostrukturerad data.
Steg 1 som
Talk to source and content owners.
Personuppgiftsansvarig.
DPO – Data Protection Officer.
Personal data patterns may vary:
(entitty extraction, text analysis, pattern recognition)
Name
Named entity recognition
Name lists (ex. for Swedish names, name lists from Statistiska Centralbyrån)
Exception lists, manually or from HR system
Gender
Fixed values. PoS tagging. (eg. for Sweden: man, Plocka ut man som har rätt form).
Phone numbers
Pattern recognition, start with country code or riktnummer
Exception lists, manually or from HR system
E-mail addresses
Pattern recognition
Exception lists, manually or from HR system
IP address
Pattern recognition
Social security number
Pattern recognition
Date of birth
Named entity recognition
Pattern recognition combined with list of words that has to be close
Ethnicity
List of values combined with name or gender in the same sentence
Credit card numbers
Pattern recognition
Notes and comments about a person
Source specific
Log posts e.g. chat conversations, purchase history, support errands, transactions
Source specific
Find what you didn’t know was there.
Find duplicates
Entity extraction, text analys, pattern recognition.
Standard search gui or customized dashboard.
Gränsnittsbild. Mer riktig.