GDPR Data processing modelData Loss Prevention

By: Ludwig Karneth

PrivatePublicIT and telecoms

The purpose of this processing is to analyze the legitimacy of modifications made to a database, and to detect and prevent data loss, by taking corrective measures concerning insecure data management. (or data loss prevention)

Purposes (3)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

Provide corrective measures to prevent the reoccurrence of insecure data management practices

Legitimate interest

Analyze the legitimacy of operations performed on target data

In the event of the detection of a data transmission containing target data, the user will be informed, by the display of a warning window or the sending of an automatic e-mail, that he is about to perform a restricted operation which will be analyzed by authorized persons in the event of persistence

Legitimate interest

Detect and prevent target data loss

Analyze internal company networks, professional workstations, as well as exit points from internal networks to prevent the loss of target data such as social security numbers and bank card numbers.

Legitimate interest

Data categories (1)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Data collected by the device

Data details

Bank detailsrequired

Social Security Numberrequiredsensitive data

Email addressrequired

Data conservation rules

Active base:

Data concerning the private life of users collected despite the precautions taken upstream by the data controller will be immediately destroyed.Data relating to an alert that does not bring to light an anomaly will be destroyed no later than 1 month from the time of the finding. In the event of an anomaly being brought to light, the data will be kept for the time necessary to carry out the associated investigation, in compliance with internal procedures and applicable legislation.

Data subject (1)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

Employees

Author:

Ludwig Karneth

Created at:07/08/2023

Updated on:00/01/1970

Nb using:4

GDPR Data processing modelData Loss Prevention

Purposes (3)

Data categories (1)

Data collected by the device

Data subject (1)

Access the full processing template