Markdown Editor
Mở trình soạn thảo

Bộ mẫu quản trị dữ liệu và quyền riêng tư

Mô hình vận hành quản trị, phân loại, chất lượng dữ liệu, MDM, hồ sơ GDPR, quyền riêng tư ngay từ thiết kế, DPIA, khử định danh, PETs, thỏa thuận chia sẻ dữ liệu và lưu giữ.

Bước 1

Đánh giá và quản trị

  1. Data Governance Operating Model Template (Data Mesh)

    Đầy đủ

    Data governance and data mesh operating model: principles, domain map, roles, decision rights RACI, policies as code, standards register, metrics, maturity roadmap

    DAMA-DMBOK 2nd Ed. Revised (name only); data mesh principles (Dehghani)

  2. Data Classification Policy Template (FIPS 199, ISO/IEC 27002 5.12)

    Đầy đủ

    Classification levels and criteria, FIPS 199 impact method, personal and special-category flags, labelling, handling matrix incl. AI use, discovery, declassification

    FIPS 199; ISO/IEC 27002:2022 5.12, 5.13; GDPR Art. 9, 10

  3. Data Quality Standard Template (ISO/IEC 25012, ODCS)

    Đầy đủ

    Organisation DQ standard: ISO/IEC 25012 vocabulary, tiers, rule catalogue, severity, enforcement points, observability, scorecard, issues, waivers

    ISO/IEC 25012:2008 (names); ODCS v3.2.0; OpenLineage 2-0-2

  4. Master Data Management Design Template (MDM Hub, Match and Merge)

    Đầy đủ

    MDM styles (registry, consolidation, coexistence, centralised), golden record, CRUD matrix, match/merge sizing, survivorship, stewardship, KPIs

    DAMA-DMBOK2 Revised (2024), Reference and Master Data knowledge area
Bước 2

Quy định và tuân thủ

  1. GDPR Record of Processing Activities (ROPA) Template

    Đầy đủ

    GDPR Art. 30 record: controller fields (1)(a)-(g), processor fields (2)(a)-(d), lawful basis, classification, retention rule, Chapter V transfers

    GDPR Art. 30; Chapter V (Art. 44-49)

  2. Privacy-by-Design Review Template (GDPR Art. 25, ISO 31700-1)

    Đầy đủ

    Scope, data inventory, consumer privacy requirements, default decisions, minimisation, user controls, notice and consent, lifecycle, third parties, evidence

    GDPR Art. 25; EDPB Guidelines 4/2019 v2.0; ISO 31700-1:2023

  3. Data Protection Impact Assessment (DPIA) Template

    Đầy đủ

    GDPR Art. 35 DPIA: WP248 screening, processing description, necessity, scored risk register, measures, DPO advice, Art. 36 prior consultation, review

    GDPR Art. 35-36; WP248 rev.01 (EDPB-endorsed); EDPB DPIA template v1.0 (2026)

  4. Privacy Threat Model Template (LINDDUN)

    Đầy đủ

    Privacy threat model by LINDDUN category: DFD with trust boundaries, data inventory, elicitation matrix, register, PETs, DPIA link

    LINDDUN (threat categories)
Bước 3

Bảo mật

  1. De-identification Assessment Template (Re-identification Risk)

    Đầy đủ

    Release model, identifiers and quasi-identifiers, motivated intruder test, techniques, k-anonymity and DP budget results, utility, release decision

    ISO/IEC 27559:2022 and ISO/IEC 20889:2018 (structure); NIST SP 800-188, SP 800-226; GDPR Recital 26, Art. 4(5)

  2. PET Selection Assessment Template (Privacy-Enhancing Technologies)

    Đầy đủ

    Problem, data flows, requirements, eight candidate PETs, knock-out screening, cost, residual risk, weighted decision matrix, validation plan

    ICO PETs guidance (under review); ENISA Data Protection Engineering 2022, Engineering Personal Data Sharing 2023; NIST SP 800-226
Bước 4

Hợp đồng

  1. Data Sharing Agreement Template (GDPR Controllers, EU Data Act)

    Đầy đủ

    Parties and roles, purpose, data scope, lawful basis, joint-controller split, Data Act terms, transfers, security, retention, rights, breach notice, fees

    GDPR Arts. 26, 44-49; EU Data Act (Regulation (EU) 2023/2854); ICO data sharing code

  2. Data Processing Agreement (DPA) Template

    Chuẩn

    Data Processing Agreement skeleton (GDPR Art.28)

    GDPR Art.28 conventions
Bước 5

Bảo trì

  1. Data Retention and Deletion Standard Template (GDPR Art. 17, SP 800-88)

    Đầy đủ

    Retention rule method, deletion classes, standard periods, deletion per store (OLTP, Iceberg, Delta, search, logs, ML, backups), erasure propagation, evidence, sanitisation

    GDPR Art. 5(1)(e), 17; NIST SP 800-88 Rev. 2; ISO/IEC 27555:2021

  2. Records Retention Schedule Template (ISO 15489)

    Đầy đủ

    Records retention and disposition schedule: appraisal, record series, triggers, precedence, legal holds, disposal authorisation and evidence, migration, review

    ISO 15489-1:2016 (structure)