[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT5wN1vm5bawYBS2P592oHNsBaPwywsJ-5uB_uRZ2_H8":3},{"assets":4,"attachments":5,"tags":6,"dataRetentionRules":16,"creatorUser":20,"creatorUserId":20,"updatedBy":20,"updatedById":20,"publishedBy":20,"publishedById":20,"areaOwnerId":20,"owners":86,"customFields":87,"area":88,"entity":92,"mergedFrom":20,"workflowStep":107,"accountables":113,"responsibles":114,"informedOwners":115,"securityMeasures":116,"personCategories":161,"id":24,"source":42,"label":25,"state":112,"versionDescription":20,"processingType":31,"parentId":20,"areaId":30,"mergeType":20,"readonly":21,"editable":36,"workflowStepId":108,"dateDeployment":20,"dateCreation":29,"dateArchived":20,"datePublication":28,"archived":21,"dateUpdate":28,"reviewDate":180,"nextReviewDate":20,"ref":20,"processingState":20,"description":26,"descriptionHtml":181,"subjectRightProcessDescription":20,"rightOfInformation":20,"rightOfAccess":20,"rightOfRectification":20,"rightOfErasure":20,"rightOfRestriction":20,"rightOfOpposition":20,"rightOfDataPortability":20,"advanceDirectives":20,"advanceDirectivesDescription":20,"rightOfInformationDescription":20,"rightOfAccessDescription":20,"rightOfRectificationDescription":20,"rightOfErasureDescription":20,"rightOfRestrictionDescription":20,"rightOfOppositionDescription":20,"rightOfDataPortabilityDescription":20,"stakeHolders":182,"assessmentScoring":20,"automaticDecision":20,"systematicMonitoring":20,"specialCategoryData":36,"largeScaleCollection":36,"crossReferencing":20,"vulnerablePeople":20,"isDPIARequired":36,"dpiaDate":20,"dpiaExemption":21,"dpiaExemptionJustification":20,"innovativeUse":20,"exclusionBenefitRightContract":20,"recipients":183,"dataControllers":208,"purposes":209,"progression":217,"quality":218,"sensitivity":219,"visible":36,"workspaceId":27,"nbReferences":220,"referenceId":20},[],[],[7,12],{"id":8,"label":9,"type":10,"color":11},"59b1cf27-799e-4a5b-b0d4-03e2b0536b6e","Legal Services","DataProcessing","#C4F97F",{"id":13,"label":14,"type":10,"color":15},"40c19fa3-a18b-42af-b672-092b0d6305a6","Private","#ffc107",[17],{"customFields":18,"tags":19,"creator":20,"readonly":21,"purposes":20,"dataProcessings":22,"dataFields":32,"asset":20,"subjectCategories":75,"id":76,"ref":20,"externalId":20,"externalLastSyncDate":20,"externalSource":20,"label":77,"description":20,"dateCreation":78,"dateUpdate":79,"baseActiveOverride":21,"intermediateArchivingOverride":21,"destructionOverride":21,"baseActiveDescription":80,"baseActiveLegalBasis":81,"baseActiveRetentionDuration":20,"baseActiveMinMax":20,"intermediateArchivingLegalBasis":20,"intermediateArchivingDescription":82,"intermediateArchivingRetentionDuration":20,"intermediateArchivingMinMax":20,"destructionDescription":83,"destructionLegalBasis":20,"dataSetSource":84,"sourceDescription":85,"assetId":20,"source":42},{},[],null,false,[23],{"id":24,"label":25,"ref":20,"description":26,"workspaceId":27,"archived":21,"dateUpdate":28,"dateCreation":29,"areaId":30,"processingType":31},"239bee03-9f48-4ddc-a464-6be1e27a4bd1","Monitoring the internal activity of the legal department and the legal proceedings conducted against it","Processing of litigation and internal legal activity data related to legal proceedings involving the legal department of a financial institution, including case tracking, decisions, and actions taken.",71,"2025-08-07T13:31:50.9376854","2023-08-08T12:04:36.3567073",116,"Default",[33,43,51,56,62,68],{"id":34,"customFields":35,"ref":20,"archivingPolicy":20,"required":36,"label":37,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":38,"personalDataCategory":20,"dataType":20,"dateCreation":39,"dateUpdate":40,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"56623927-1dd9-413f-99ab-d8b5d26ae0c4",{},true,"Comments","Current","2023-08-08T12:04:36.7388096","2023-11-29T11:46:24.826806",83447,"Intern",{"id":44,"customFields":45,"ref":20,"archivingPolicy":20,"required":36,"label":46,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":36,"sensitivityClassification":47,"personalDataCategory":48,"dataType":20,"dateCreation":49,"dateUpdate":50,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"f93f235a-8ce3-4752-a773-dcbaf5355dfc",{},"Court ruling","Sensitive","CriminalConvictions","2023-08-08T12:04:36.9079519","2025-06-24T22:10:47.9006681",{"id":52,"customFields":53,"ref":20,"archivingPolicy":20,"required":36,"label":54,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":36,"sensitivityClassification":47,"personalDataCategory":48,"dataType":20,"dateCreation":55,"dateUpdate":20,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"d8408bf5-f9f7-49da-86cc-5ed668982c94",{},"Action taken by customer or bank","2023-08-08T12:04:37.078235",{"id":57,"customFields":58,"ref":20,"archivingPolicy":20,"required":36,"label":59,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":38,"personalDataCategory":60,"dataType":20,"dateCreation":61,"dateUpdate":20,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"c38c87f4-dbbb-4487-82e4-2851a2d7d934",{},"Object of challenge","ProfessionalLife","2023-08-08T12:04:37.2559728",{"id":63,"customFields":64,"ref":20,"archivingPolicy":20,"required":36,"label":65,"definition":66,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":36,"sensitivityClassification":47,"personalDataCategory":48,"dataType":20,"dateCreation":67,"dateUpdate":20,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"e3192221-c74a-414e-a32a-9c22c335ca88",{},"Offences, convictions and security measures","Insofar as their recording is strictly necessary for the follow-up of the measure pronounced against the minor or young person. This category of data may only be collected and processed by legal entities managing a public service and acting within the scope of their legal powers","2023-08-08T12:02:50.7929474",{"id":69,"customFields":70,"ref":20,"archivingPolicy":20,"required":36,"label":71,"definition":20,"technicalDefinition":20,"sensitiveDataFieldLegalJustification":20,"sensitiveDataFieldLegalJustificationDescription":20,"sensitiveData":21,"sensitivityClassification":38,"personalDataCategory":72,"dataType":20,"dateCreation":73,"dateUpdate":74,"creator":20,"workflowStepId":41,"workflowStep":20,"source":42},"296c2904-a540-4f8b-caa4-08dadc4a0166",{},"Name and surname","CivilStatus","2022-12-13T09:58:12.9804907","2025-09-01T21:49:35.432236",[],"5d3b9818-9a63-48c4-aef2-0db56db539c9","Litigation data","2023-08-08T12:04:36.5627616","2025-08-07T13:27:47.5383229","5 years after exhaustion of legal remedies","Aligned with ICO best practice and Law Society retention standards. ICO recommends data minimisation and justifiable retention: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/accountability-and-governance/retention-and-disposal/","Optional archive based on ongoing risk","Data must be securely deleted or anonymised after retention period, unless exceptional justification applies (e.g. unresolved liability, statute of limitation). Implement periodic reviews.","Direct","",[],{},{"dpo":20,"referent":20,"owner":20,"representative":20,"dataProtectionAuthority":20,"id":30,"type":89,"parentId":90,"ref":20,"label":91,"description":20,"logoUrl":20,"address":20,"zipCode":20,"city":20,"region":20,"countryCode":20,"immatriculationNumber":20,"phoneNumber":20,"mailAddress":20,"dpoId":20,"referentId":20,"ownerId":20,"representativeId":20,"dataProtectionAuthorityId":20},"Area",357,"Template (english)",{"dpo":20,"referent":20,"owner":20,"representative":20,"dataProtectionAuthority":93,"id":90,"type":104,"parentId":20,"ref":20,"label":105,"description":20,"logoUrl":20,"address":20,"zipCode":20,"city":20,"region":20,"countryCode":106,"immatriculationNumber":20,"phoneNumber":20,"mailAddress":20,"dpoId":20,"referentId":20,"ownerId":20,"representativeId":20,"dataProtectionAuthorityId":94},{"id":94,"label":95,"siteURL":96,"phoneNumber":97,"email":98,"countryCode":99,"address":100,"city":101,"zipCode":102,"declarationViolationUrl":103},34,"ICO - Information Commissioner's Office","https://ico.org.uk/","0303 123 1113","casework@ico.org.uk","UKI","Wycliffe House Water Lane Wilmslow","Cheshire","SK9 5AF","https://ico.org.uk/make-a-complaint/","Entity","Regulatory Reference – English","GB",{"id":108,"label":109,"color":110,"order":111,"itemLimit":20,"type":10,"finalStep":36,"initialStep":21,"authorizedRole":20,"authorizedRoleId":20,"descriptionHtml":20,"mappedState":112},1062,"Done","#42c478",3,"Active",[],[],[],[117,129,141,152],{"date":118,"state":119,"descriptionHtml":20,"readonly":21,"purposes":20,"customFields":120,"id":121,"ref":20,"label":122,"type":123,"description":124,"relatedRisk":20,"moreDetailsUrl":85,"dateCreation":125,"dateUpdate":20,"tags":126,"attachments":127,"creatorUser":20,"workflowStepId":128,"workflowStep":20},"2026-04-21T18:17:43.5425218Z","Todo",{},"7aaf258f-03d7-43f5-647c-08ddd5831439","Criminal data related documented policy under DPA 2018, Schedule 1, para. 35","Organizational","see template: https://ico.org.uk/media/2259371/article-10-criminal-convictions-policy-template.docx","2025-08-07T13:30:12.0725484",[],[],90380,{"date":130,"state":131,"descriptionHtml":20,"readonly":21,"purposes":132,"customFields":133,"id":134,"ref":20,"label":135,"type":123,"description":136,"relatedRisk":20,"moreDetailsUrl":85,"dateCreation":137,"dateUpdate":20,"tags":138,"attachments":139,"creatorUser":20,"workflowStepId":140,"workflowStep":20},"2026-04-21T18:17:43.5425264Z","None",[],{},"d9669fc5-f2c8-4906-a787-0d52551fc455","Management of authorizations","Limit access to only the data a user needs","2023-08-08T12:01:38.1567426",[],[],90381,{"date":142,"state":131,"descriptionHtml":20,"readonly":21,"purposes":20,"customFields":143,"id":144,"ref":20,"label":145,"type":146,"description":147,"relatedRisk":20,"moreDetailsUrl":85,"dateCreation":148,"dateUpdate":149,"tags":150,"attachments":151,"creatorUser":20,"workflowStepId":140,"workflowStep":20},"2026-04-21T18:17:43.542527Z",{},"d8029fc2-1a1b-4912-82a5-158644e945ea","Logical access control","Technical","To ensure that a user only accesses the data he/she needs, he/she must be given a unique identifier and must authenticate himself/herself before any use of the IT resources.","2023-05-11T16:19:47.2605656","2024-05-16T22:17:09.1656433",[],[],{"date":153,"state":131,"descriptionHtml":20,"readonly":21,"purposes":154,"customFields":155,"id":156,"ref":20,"label":157,"type":146,"description":85,"relatedRisk":20,"moreDetailsUrl":85,"dateCreation":158,"dateUpdate":20,"tags":159,"attachments":160,"creatorUser":20,"workflowStepId":140,"workflowStep":20},"2026-04-21T18:17:43.542528Z",[],{},"e855ce4c-6f7a-40dd-af97-ed01cb311372","Individual login and password","2022-12-13T10:01:04.3028922",[],[],[162,171],{"subjectCategory":163,"displayName":165,"id":169,"subjectCategoryId":164,"comment":20,"dataSubjectVolumeMax":20,"readonly":21,"purposes":170},{"id":164,"label":165,"ref":20,"dateCreation":166,"dateUpdate":20,"creatorUserId":167,"creatorUser":20,"description":20,"minorConcerned":21,"workflowStepId":168,"workflowStep":20},"f4ae16a6-d972-43eb-bf15-08ddd583da69","Criminals","2025-08-07T13:31:27.7054433",38,97314,"4f44ea58-a52c-4db1-5055-08ddd56d43c1",[],{"subjectCategory":172,"displayName":174,"id":178,"subjectCategoryId":173,"comment":85,"dataSubjectVolumeMax":20,"readonly":21,"purposes":179},{"id":173,"label":174,"ref":20,"dateCreation":175,"dateUpdate":20,"creatorUserId":176,"creatorUser":20,"description":20,"minorConcerned":21,"workflowStepId":177,"workflowStep":20},"dcd87366-4c2b-43b1-a9d0-3e373aca7e89","Customers","2023-08-08T12:01:41.4596527",6931,97315,"92fff0a4-1a69-43a9-be60-5554d68f05aa",[],"2023-10-09T12:33:20.0212371","\u003Cp>\u003Ca href=\"https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000030371099?fonds=CNIL&isAdvancedResult=&page=2&pageSize=100&query=bank&searchField=ALL&searchProximity=&searchType=ALL&tab_selection=all&typePagination=DEFAULT\">DELIBERATION n°2015-064 du 12 février 2015 - Légifrance (legifrance.gouv.fr)\u003C/a>\u003C/p>",[],[184,193,201],{"purposes":185,"dataRetentionRules":20,"parentId":20,"children":186,"displayName":187,"label":187,"transfers":188,"recipientType":189,"type":190,"jobTitle":20,"id":191,"actorId":20,"actor":20,"areaId":20,"area":20,"description":192,"readonly":21},[],[],"Internal Legal Team",[],"InternalService","Recipient","37c3a6c3-8a8d-4d8f-8722-03fb19d68c00","access under confidentiality and professional privilege",{"purposes":194,"dataRetentionRules":20,"parentId":20,"children":195,"displayName":196,"label":196,"transfers":197,"recipientType":198,"type":190,"jobTitle":20,"id":199,"actorId":20,"actor":20,"areaId":20,"area":20,"description":200,"readonly":21},[],[],"Legal representatives (e.g. solicitors, barristers)",[],"ThirdParty","16251fda-9fef-4ca7-ad32-d0af5304f09c"," third-party autonomous controllers under professional duty of confidentiality",{"purposes":202,"dataRetentionRules":20,"parentId":20,"children":203,"displayName":204,"label":204,"transfers":205,"recipientType":189,"type":190,"jobTitle":20,"id":206,"actorId":20,"actor":20,"areaId":20,"area":20,"description":207,"readonly":21},[],[],"Legal and Recovery Department Staff",[],"82b6e769-e058-49a4-9628-8a2f9f5f4107"," authorised staff only, under access control",[],[210],{"id":211,"key":212,"label":213,"description":20,"legalBasis":214,"legalBasisText":215,"legalBasisDescription":216,"readonly":21},"f2a0de87-9725-404a-9151-27846096d9e5","0f675758-8e1d-4ad2-9d7f-efdc9cf917b8","Manage and monitor the internal activities of the Legal Department","LegitimateInterest","Legitimate interest","Art. 6(1)(f) – Legitimate interest (legal defence and risk mitigation) + Art. 9(2)(f) – Legal claims + Art. 10 – Criminal offence data processed under legal basis for legal claims (Schedule 1, Part 3 of DPA 2018)",100,56,40,0]