"DSGVO/GDPR-Verarbeitungsverzeichnis" in LeanIX

Hi Robert, 
yes, we are currently doing that - although not with a dedicated factsheet but with a set of attributes on the application factsheet. I have to admit, that we are mainly a B2B company and do not face a huge amount of GDPR related inquiries, nevertheless we found a pragmatic way to support our data privacy and HR colleagues in creating the necessary lists and overviews.
Feel free to reach out to me, if you like to discuss this further.
Best regards,
Hendrik

Hi @Robert Geisler ,

in collaboration with our Lawer we developed a custom Factsheet:
 

We defined the subscription roles Data Manger (accountable), Data Protection Officer (responsible) and European Data Protection Officer (responsible). We found that’s too complex to the End users to assign Processes or Data Objects. They just create it as a Process/UseCase and link it to an Application they fulfil this UseCase. On Application side we have Data Objects linked and can so identify the concrete Data Object(s) related. Perhaps this approach may inspire you.
Best regards,

Carsten

Hi

 

Yes we are doing it too, and modelled it with a new fact sheet type. On the Compliance Fact Sheet type we are modelling the datasubject and the datacategory as parent - child relationship:

For example:

 

Internal Employee / sensitive Data

Internal Employee / base Data

Internal Employee / webdata 

 

etc..

 

Regards

 

Hendrik

Hi Hendrik,

can you please give us an overview or a Screenshot what Attributes you have on your Compliance Fact Sheet?

Kind Regards

Alexander