In the data glossary I can indicate that a data field is 'sensitive'. There are two kinds of 'sensitive data' in a typical organisation: sensitive under the GDPR sensitive according to the internal data classification policy (f.e. for staffing industry, wage information is sensitive) It would be practical to be able to register both, and that both would have an effect on the risk score of processing activities.

Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Data classification type in data glossary

julieDF

In the data glossary I can indicate that a data field is 'sensitive'. There are two kinds of 'sensitive data' in a typical organisation:

sensitive under the GDPR
sensitive according to the internal data classification policy (f.e. for staffing industry, wage information is sensitive)

It would be practical to be able to register both, and that both would have an effect on the risk score of processing activities.

Jerome_Dastra

Hello Julie,

Thank you for the message!

Regarding this additional indicator. We have developed the custom fields with this in mind.

This way you can add a custom field at the field level directly. For example: internal sensitivity

For the sensitivity indicator calculated automatically in Dastra, it is in response to the GDPR obligation to address compliance by the risks on the rights and freedoms of data subjects. Thus, this indicator must take into account the risks related to the GDPR.

You can also use Dastra's risk management module to assess the internal risks related to a processing operation. This will allow you to monitor internal risks and to have a risk score for each processing.

I hope this answers your problem.

Have a nice day

Jérôme