GDPR day - in the live of an augmented DPO

1. For discussion only

2. For discussion only

3. For discussion only
▪
▪
▪
▪
▪

4. For discussion only
4

5. For discussion only

6. For discussion only
▪
▪
▪
▪

7. For discussion only
▪
▪
▪
▪

8. For discussion only
Don’t Panic - It is going to be fine
Data Governance is well established
It is now on version 2.0

9. For discussion only
▪
▪
GDPR

10. For discussion only
You must do more, faster & with higher risk
▪
▪
▪
▪
▪
▪
▪
▪
▪

11. For discussion only

12. For discussion only
▪
▪
▪
▪
▪
▪
▪

13. For discussion only
▪
▪

14. For discussion only
▪
▪
▪
▪
▪
▪
▪
▪
▪
Agile Activity
Evolution
LEAN Simplicity
LEAN &
Dynamic Data
* More Value, from Less (and faster)

15. For discussion only
▪
▪
▪

16. For discussion only
▪
▪
▪
▪
▪
▪
▪
▪
▪
▪
▪
▪
• Risks, Issues & Tasks
• Reporting &
Auditing
• Data Governance
• Data Stewardship

17. For discussion only
▪
▪
▪
▪
▪
Business
Key
Prospects
(HUB)
Business
Key HR
(HUB)
HUB
Attributes
FirstName
LastName
Email
Attributes
FirstName
LastName
Email
MetaData
010001001111
111001101111
…
MetaData
010001001111
111001101111
…
Rules
Rules
Attributes
Xghgd78ç
hGdso719
UAOKLqbd9V
Attributes
kqKiq39
jsQjSdqs70
Jqsd9§2qs

18. For discussion only
▪
▪
▪
▪
1.Operational
Systems
2.Dynamic
Data
3.Master Data

19. For discussion only

20. For discussion only
20

21. For discussion only
▪
▪
▪
▪
▪
▪
▪
DPIA
DPIA
DPIA
DPIADPIA
s

22. For discussion only
T T T R R R
DPI
A
DPI
A
DPI
A
DPI
A
DPI
A
DPI
A
DPI
A
DPI
A
Ne
w
DPI
A• 
▪
• 
▪
• 
▪
• 
▪
Assessment n Implementation n Operations

23. For discussion only
• Daily
(really)?
• Weekly
• Monthly
• Quarterly
R R R
• 
▪
• 
▪
• 
▪
• 
▪
T T T
DPI
A
DPI
A
DPI
A
DPI
A
DPI
A
DPI
A
DPI
A
DPI
A
Ne
w
DPI
A
Assessment n Implementation n Operations

24. For discussion only
Keep it LEAN. Think outside of the box
▪
▪
▪
▪

25. For discussion only

26. For discussion only
▪
▪
DPIA
DPIA
DPIA
DPIADPIA
s
DPIA
DPIA
DPIA
DPIADPIA
s

27. For discussion only

28. For discussion only
▪
▪
▪

29. For discussion only
▪
▪
▪
▪

30. For discussion only
▪
▪
▪
▪

31. For discussion only
▪
▪
▪
▪
▪
▪

32. For discussion only
@ Any Level:
A. Decisions
B. Actions
C. Info
D. Insights
E. (repeat)
Data Governance (DG) Maturity:
▪
▪
▪
▪

33. For discussion only

34. For discussion only
34

35. For discussion only
▪
▪
▪
▪
▪
▪

36. For discussion only
T T T

37. For discussion only
How far have you progressed in this action?
• Data Category
• Risk status
• Milestone(s)
• As many as you like
• Milestone progress tracking (for this action)
• Start & End dates
• Last update dates
Keeping it simple to increase engagement…
… what do you really want to know?
What
Is the
status?
What
Is the
outlook?

38. For discussion only
Emphasis is on simplifying Top-down
controls and reporting
▪
▪
▪
▪
▪
▪
▪

39. For discussion only
Organisation
Tasks Portfolio
System 1
Process 1
Purpose 1
Action A
Project B
System 2
…
Risks Portfolio
GDPR Risks
R1
R2
R3
R4
Other risks
Stakeholders
Portfolio
▪ Repositories Management
▪ Data Mapping
▪ Roles & responsibilities
▪ Action/project
management
▪ Transversal
▪ Scalability
•
•

40. For discussion only
Organisation
Tasks Portfolio
System 1
Process 1
Purpose 1
Action A
Project B
Purpose 2
Action C
Action D
System 2
…
Risks Portfolio
GDPR Risks
R1
R2
R3
R4
Other risks
Stakeholders
Portfolio
•
•
▪ Repositories Management
▪ Data Mapping
▪ Roles & responsibilities
▪ Action/project
management
▪ Transversal
▪ Scalability

41. For discussion only
▪
▪
▪
▪
▪
▪

42. For discussion only

43. For discussion only
▪
▪
▪
▪
▪

44. For discussion only
▪
▪
▪
▪
▪

45. For discussion only
▪
▪
▪
▪
▪

46. For discussion only
GDPR

47. For discussion only
Assessment
Done
Implementation
Done (25/5)

48. For discussion only
Management
Support
Execution
ASSESSMENT
SUPPORT
TOOLS
IMPLEMENTATION & OPERATIONAL
SUPPORT TOOLS
PLAN & REPLAN OF ALL ACTIONS
A I O
▪
▪
▪

49. For discussion only
▪
▪
▪
▪
▪

50. For discussion only
#2
#1

51. For discussion only
#1 Organisation
Tasks
Portfolio
System 1
Process 1
Purpose 1
Action A
Project B
System 2
…
Risks Portfolio
GDPR Risks
R1
R2
R3
R4
Other risks
Stakeholders
Portfolio
- Repositories Management
- Data Mapping
- Roles & responsibilities
- Action/project management
- Volume & Scalability
- Extensions: ISO, ePrivacy

52. For discussion only
Organisation
Tasks
Portfolio
System 1
Process 1
Purpose 1
Action A
Project B
Purpose 2
Action C
Action D
System 2
…
Risks Portfolio
GDPR Risks
R1
R2
R3
R4
Other risks
Stakeholders
Portfolio
#1
- Repositories Management
- Data Mapping
- Roles & responsibilities
- Action/project management
- Volume & Scalability
- Extensions: ISO, ePrivacy

53. For discussion only
ENTER DEMO
Login: respa Login: dpo
Actions
responsible
Data Protection
Officer
Login: respc
System
Owner
#1

54. For discussion only
ENTER DEMO
#2

55. For discussion only

56. For discussion only
▪
▪
▪
▪
▪

57. For discussion only
+ + +

58. For discussion only

59. For discussion only
▪
▪
▪
▪
▪

60. For discussion only
H
1

61. For discussion only
• Connected & secured
• Data Vaulting
• Compliance rules
• Data Quality Rules
• Prescriptive models
• On premise VS cloud
2 Business
Key
Prospects
(HUB)
Business
Key HR
(HUB)
HUB
Attributes
FirstName
LastName
Email
MetaData
010001001111
111001101111
…
Attributes
FirstName
LastName
Email
MetaData
010001001111
111001101111
…
Rules
Rules
Attributes
Xghgd78ç
hGdso719
UAOKLqbd9V
Attributes
kqKiq39
jsQjSdqs70
Jqsd9§2qs
GDPR compliance results
Prescriptive model results