Markdown Editor
Відкрити редактор

Набір управління даними та приватності

Операційна модель управління, класифікація, якість даних, MDM, реєстри GDPR, privacy by design, DPIA, деідентифікація, PETs, угоди про обмін даними, зберігання.

Крок 1

Рев'ю та управління

  1. Data Governance Operating Model Template (Data Mesh)

    Повний

    Data governance and data mesh operating model: principles, domain map, roles, decision rights RACI, policies as code, standards register, metrics, maturity roadmap

    DAMA-DMBOK 2nd Ed. Revised (name only); data mesh principles (Dehghani)

  2. Data Classification Policy Template (FIPS 199, ISO/IEC 27002 5.12)

    Повний

    Classification levels and criteria, FIPS 199 impact method, personal and special-category flags, labelling, handling matrix incl. AI use, discovery, declassification

    FIPS 199; ISO/IEC 27002:2022 5.12, 5.13; GDPR Art. 9, 10

  3. Data Quality Standard Template (ISO/IEC 25012, ODCS)

    Повний

    Organisation DQ standard: ISO/IEC 25012 vocabulary, tiers, rule catalogue, severity, enforcement points, observability, scorecard, issues, waivers

    ISO/IEC 25012:2008 (names); ODCS v3.2.0; OpenLineage 2-0-2

  4. Master Data Management Design Template (MDM Hub, Match and Merge)

    Повний

    MDM styles (registry, consolidation, coexistence, centralised), golden record, CRUD matrix, match/merge sizing, survivorship, stewardship, KPIs

    DAMA-DMBOK2 Revised (2024), Reference and Master Data knowledge area
Крок 2

Регулювання та відповідність

  1. GDPR Record of Processing Activities (ROPA) Template

    Повний

    GDPR Art. 30 record: controller fields (1)(a)-(g), processor fields (2)(a)-(d), lawful basis, classification, retention rule, Chapter V transfers

    GDPR Art. 30; Chapter V (Art. 44-49)

  2. Privacy-by-Design Review Template (GDPR Art. 25, ISO 31700-1)

    Повний

    Scope, data inventory, consumer privacy requirements, default decisions, minimisation, user controls, notice and consent, lifecycle, third parties, evidence

    GDPR Art. 25; EDPB Guidelines 4/2019 v2.0; ISO 31700-1:2023

  3. Data Protection Impact Assessment (DPIA) Template

    Повний

    GDPR Art. 35 DPIA: WP248 screening, processing description, necessity, scored risk register, measures, DPO advice, Art. 36 prior consultation, review

    GDPR Art. 35-36; WP248 rev.01 (EDPB-endorsed); EDPB DPIA template v1.0 (2026)

  4. Privacy Threat Model Template (LINDDUN)

    Повний

    Privacy threat model by LINDDUN category: DFD with trust boundaries, data inventory, elicitation matrix, register, PETs, DPIA link

    LINDDUN (threat categories)
Крок 3

Безпека

  1. De-identification Assessment Template (Re-identification Risk)

    Повний

    Release model, identifiers and quasi-identifiers, motivated intruder test, techniques, k-anonymity and DP budget results, utility, release decision

    ISO/IEC 27559:2022 and ISO/IEC 20889:2018 (structure); NIST SP 800-188, SP 800-226; GDPR Recital 26, Art. 4(5)

  2. PET Selection Assessment Template (Privacy-Enhancing Technologies)

    Повний

    Problem, data flows, requirements, eight candidate PETs, knock-out screening, cost, residual risk, weighted decision matrix, validation plan

    ICO PETs guidance (under review); ENISA Data Protection Engineering 2022, Engineering Personal Data Sharing 2023; NIST SP 800-226
Крок 4

Контракт

  1. Data Sharing Agreement Template (GDPR Controllers, EU Data Act)

    Повний

    Parties and roles, purpose, data scope, lawful basis, joint-controller split, Data Act terms, transfers, security, retention, rights, breach notice, fees

    GDPR Arts. 26, 44-49; EU Data Act (Regulation (EU) 2023/2854); ICO data sharing code

  2. Data Processing Agreement (DPA) Template

    Стандарт

    Data Processing Agreement skeleton (GDPR Art.28)

    GDPR Art.28 conventions
Крок 5

Супровід

  1. Data Retention and Deletion Standard Template (GDPR Art. 17, SP 800-88)

    Повний

    Retention rule method, deletion classes, standard periods, deletion per store (OLTP, Iceberg, Delta, search, logs, ML, backups), erasure propagation, evidence, sanitisation

    GDPR Art. 5(1)(e), 17; NIST SP 800-88 Rev. 2; ISO/IEC 27555:2021

  2. Records Retention Schedule Template (ISO 15489)

    Повний

    Records retention and disposition schedule: appraisal, record series, triggers, precedence, legal holds, disposal authorisation and evidence, migration, review

    ISO 15489-1:2016 (structure)