GDPR Data processing modelData Loss Prevention

Organisation: PrivateFunction: IT and telecomsOrganisation: Public

The purpose of this processing is to analyze the legitimacy of modifications made to a database, and to detect and prevent data loss, by taking corrective measures concerning insecure data management. (or data loss prevention)

Purposes (3)

A purpose is the objective pursued by the setting up of your file. It indicates what the processing of personal data will be used for, its purpose. This purpose must be clear and understandable

Detect and prevent target data loss

Analyze internal company networks, professional workstations, as well as exit points from internal networks to prevent the loss of target data such as social security numbers and bank card numbers.

Legitimate interest

Provide corrective measures to prevent the reoccurrence of insecure data management practices

Legitimate interest

Analyze the legitimacy of operations performed on target data

In the event of the detection of a data transmission containing target data, the user will be informed, by the display of a warning window or the sending of an automatic e-mail, that he is about to perform a restricted operation which will be analyzed by authorized persons in the event of persistence

Legitimate interest

Data categories (1)

Personal data is any information relating to an identified or identifiable natural person. A natural person can be identified either directly (eg surname and first name) or indirectly (eg phone number, social security number, email or postal address, but also voice or image)

Data collected by the device

Data details

Bank detailsrequired

National Insurance numberrequiredsensitive data

Email addressrequired

Data conservation rules

Active base:

No statutory period applies; the controller should set short periods based on the security purpose (UK GDPR, Article 5(1)(e)), for example: personal data relating to users' private lives collected despite upstream precautions are deleted as soon as they are identified; data relating to an alert that reveals no anomaly are deleted within 1 month of the alert; where an anomaly is found, data are kept for the time needed for the investigation and any resulting disciplinary or legal proceedings, in line with internal procedures.

UK GDPR, Article 5(1)(e)

Destruction

Data subject (1)

A data subject is any person whose data is collected, retained or processed by the data processing. e.g. In a recruitement process, any candidate for a position proposed in recruitement management process

Employees

Created at:07/08/2023

Updated on:10/05/2026

Nb using:0