This document discusses using mind maps to help organizations comply with the General Data Protection Regulation (GDPR). It provides an overview of mind maps and GDPR. The document outlines a basic process for creating a mind map to understand an organization's data access issues and relationships. This includes brainstorming topics, sorting them by affinity, and reorganizing based on relationships. The goal is to help craft internal processes for GDPR compliance by visualizing data flows and access points across departments and systems. It recommends not underestimating complexity and notes the provider has tools to help through their partnership with LINQ Ltd.

1. Mind Maps
for GDPR
Andrew Zolnai
blog.zolnai.ca
with LINQ Ltd.
www.linq.it

2. What it means
Definitions
Process

3. Wikipedia
• A mind map is a diagram used to visually organize
information. A mind map is hierarchical and shows
relationships among pieces of the whole. [1]
• The General Data Protection Regulation (GDPR)
(Regulation (EU) 2016/679) is a regulation by which
the European Parliament, the Council of the
European Union and the European Commission
intend to strengthen and unify data protection for
all individuals within the European Union (EU). [2]

4. Premise
• GDPR sets watermark for data tracking and auditing
• Not unlike SOx (Sarbanes-Oxley [3]) in the US
• But for internet data access of private data
• Need to understand various info parameters
• Varies among departments & companies
• This shows process to get started on needed steps

5. Creative
Commons
Controlled
Access
Brain storm data access issue

6. Organic
Category-oriented

7. Creative
Commons
Track / audit
Data Public
Domain?Inside
Firewall?
Public
Internet
Controlled
Access
Private
Intranet
Public web?
Public
Access
Sort topics by affinity

8. Track / audit
Data Public
Domain?
Public web?Inside Firewall?
Public access
Creative
Commons
Private Intranet
Controlled Access
Public Internet
Create mind map

9. Function
Process-oriented

10. Creative
Commons
Track / audit Data Public
Domain?
Inside Firewall?
Controlled
Access
Private
Intranet
Public web?
Public access?
Re-sort by relationships

11. Track / audit
Data Public
Domain?
Public web?Inside Firewall?
Public access?
Creative
Commons
Private
Intranet
Controlled
Access
Public
Internet
N Y N
Y
N Y
Oriented mind map

12. Work flow: process & infrastructure

13. Where to?
• Showed here basic process to get started
• Must craft own departmental or company process
• Never underestimate the complexity
• Help is at hand
• Partnered with LINQ Ltd.
• Tools to address GDPR [4]

14. People – process – technology

15. LINQ for GDPR