Markdown Editor
에디터 열기

데이터 거버넌스 및 프라이버시 키트

거버넌스 운영 모델, 분류, 데이터 품질, MDM, GDPR 기록, 설계 단계의 프라이버시, DPIA, 비식별화, PETs, 데이터 공유 계약, 보존.

1단계

검토와 거버넌스

  1. Data Governance Operating Model Template (Data Mesh)

    전체

    Data governance and data mesh operating model: principles, domain map, roles, decision rights RACI, policies as code, standards register, metrics, maturity roadmap

    DAMA-DMBOK 2nd Ed. Revised (name only); data mesh principles (Dehghani)

  2. Data Classification Policy Template (FIPS 199, ISO/IEC 27002 5.12)

    전체

    Classification levels and criteria, FIPS 199 impact method, personal and special-category flags, labelling, handling matrix incl. AI use, discovery, declassification

    FIPS 199; ISO/IEC 27002:2022 5.12, 5.13; GDPR Art. 9, 10

  3. Data Quality Standard Template (ISO/IEC 25012, ODCS)

    전체

    Organisation DQ standard: ISO/IEC 25012 vocabulary, tiers, rule catalogue, severity, enforcement points, observability, scorecard, issues, waivers

    ISO/IEC 25012:2008 (names); ODCS v3.2.0; OpenLineage 2-0-2

  4. Master Data Management Design Template (MDM Hub, Match and Merge)

    전체

    MDM styles (registry, consolidation, coexistence, centralised), golden record, CRUD matrix, match/merge sizing, survivorship, stewardship, KPIs

    DAMA-DMBOK2 Revised (2024), Reference and Master Data knowledge area
2단계

규제와 컴플라이언스

  1. GDPR Record of Processing Activities (ROPA) Template

    전체

    GDPR Art. 30 record: controller fields (1)(a)-(g), processor fields (2)(a)-(d), lawful basis, classification, retention rule, Chapter V transfers

    GDPR Art. 30; Chapter V (Art. 44-49)

  2. Privacy-by-Design Review Template (GDPR Art. 25, ISO 31700-1)

    전체

    Scope, data inventory, consumer privacy requirements, default decisions, minimisation, user controls, notice and consent, lifecycle, third parties, evidence

    GDPR Art. 25; EDPB Guidelines 4/2019 v2.0; ISO 31700-1:2023

  3. Data Protection Impact Assessment (DPIA) Template

    전체

    GDPR Art. 35 DPIA: WP248 screening, processing description, necessity, scored risk register, measures, DPO advice, Art. 36 prior consultation, review

    GDPR Art. 35-36; WP248 rev.01 (EDPB-endorsed); EDPB DPIA template v1.0 (2026)

  4. Privacy Threat Model Template (LINDDUN)

    전체

    Privacy threat model by LINDDUN category: DFD with trust boundaries, data inventory, elicitation matrix, register, PETs, DPIA link

    LINDDUN (threat categories)
3단계

보안

  1. De-identification Assessment Template (Re-identification Risk)

    전체

    Release model, identifiers and quasi-identifiers, motivated intruder test, techniques, k-anonymity and DP budget results, utility, release decision

    ISO/IEC 27559:2022 and ISO/IEC 20889:2018 (structure); NIST SP 800-188, SP 800-226; GDPR Recital 26, Art. 4(5)

  2. PET Selection Assessment Template (Privacy-Enhancing Technologies)

    전체

    Problem, data flows, requirements, eight candidate PETs, knock-out screening, cost, residual risk, weighted decision matrix, validation plan

    ICO PETs guidance (under review); ENISA Data Protection Engineering 2022, Engineering Personal Data Sharing 2023; NIST SP 800-226
4단계

계약

  1. Data Sharing Agreement Template (GDPR Controllers, EU Data Act)

    전체

    Parties and roles, purpose, data scope, lawful basis, joint-controller split, Data Act terms, transfers, security, retention, rights, breach notice, fees

    GDPR Arts. 26, 44-49; EU Data Act (Regulation (EU) 2023/2854); ICO data sharing code

  2. Data Processing Agreement (DPA) Template

    표준

    Data Processing Agreement skeleton (GDPR Art.28)

    GDPR Art.28 conventions
5단계

유지보수

  1. Data Retention and Deletion Standard Template (GDPR Art. 17, SP 800-88)

    전체

    Retention rule method, deletion classes, standard periods, deletion per store (OLTP, Iceberg, Delta, search, logs, ML, backups), erasure propagation, evidence, sanitisation

    GDPR Art. 5(1)(e), 17; NIST SP 800-88 Rev. 2; ISO/IEC 27555:2021

  2. Records Retention Schedule Template (ISO 15489)

    전체

    Records retention and disposition schedule: appraisal, record series, triggers, precedence, legal holds, disposal authorisation and evidence, migration, review

    ISO 15489-1:2016 (structure)