Data Security and Privacy Lifecycle Management (DSP)

Level N/A

Apply industry accepted methods for the secure disposal of data from storage media such that data is not recoverable by any forensic means.

Login

Data Security and Privacy Lifecycle Management (DSP)

Level N/A

Create and maintain a data inventory, at least for any sensitive data and personal data.

Login

Data Security and Privacy Lifecycle Management (DSP)

Classify data according to its type and sensitivity level.

Login

Data Security and Privacy Lifecycle Management (DSP)

Create data flow documentation to identify what data is processed, stored or transmitted where. Review data flow documentation at defined intervals, at least annually, and after any change.

Login

Data Security and Privacy Lifecycle Management (DSP)

Document ownership and stewardship of all relevant documented personal and sensitive data. Perform review at least annually.

Login

Data Security and Privacy Lifecycle Management (DSP)

Develop systems, products, and business practices based upon a principle of security by design and industry best practices.

Login

Data Security and Privacy Lifecycle Management (DSP)

Develop systems, products, and business practices based upon a principle of privacy by design and industry best practices. Ensure that systems' privacy settings are configured by default, according to all applicable laws and regulations.

Login

Data Security and Privacy Lifecycle Management (DSP)

Conduct a Data Protection Impact Assessment (DPIA) to evaluate the origin, nature, particularity and severity of the risks upon the processing of personal data, according to any applicable laws, regulations and industry best practices.

Login

Data Security and Privacy Lifecycle Management (DSP)

Define, implement and evaluate processes, procedures and technical measures that ensure any transfer of personal or sensitive data is protected from unauthorized access and only processed within scope as permitted by the respective laws and regulations.

Login

Data Security and Privacy Lifecycle Management (DSP)

Define and implement, processes, procedures and technical measures to enable data subjects to request access to, modification, or deletion of their personal data, according to any applicable laws and regulations.

Login