Use cases
RGPD data mapping
RGPD data mapping is an essential component of compliance with data protection regulations also known as Data Compliance. With Tale of Data, you can ensure optimal management of sensitive information within your organization thanks to Shadow IT functions.
The need
Reference sensitive data to achieve RGPD compliance.
Our client was required to comply with the General Data Protection Regulation (RGPD). According to the requirements of the RGPD, all retained personal data must be associated with legitimate processing, in line with the standards set by the CNIL. Consequently, our customer, like any company, must be able to justify and document the retention of this data in order to comply with the regulations, with particular emphasis on the notions of consent and legitimate interest.
To achieve this objective, our client's challenge was to answer these 4 questions:
- Who within the company keeps personal data?
- What types of personal data are involved?
- Where is this personal data stored? Databases, but also Shadow IT (Excel files scattered across the internal network, for example).
- For what purpose is this data stored?
Proposed solution
Mapping data with Mass Data Discovery
Our "Mass Data Discovery" technology enabled us to automatically scan :
- All relational databases
- Shared network drives: all directories, and their sub-directories, were scanned for Excel, CSV, XML or JSON files
- Data managed in the cloud (CRM, content management systems...)
The mapping provided by Tale of Data enabled our client to identify the personal data stored, and to justify their presence in the associated processing operations. This exhaustive mapping of RGPD data, generated automatically, gives users of the module direct, simple and precise access to the locations where these personal data are stored.
.png "RGPD-data-mapping")
Gains achieved
The data scan (= "Bottom-Up" approach) enabled RGPD data to be mapped, and therefore an exhaustive analysis, as opposed to interviews, which rely on the memory of interviewees and documentation that is rarely up to date.
Mapping has greatly enhanced the credibility of the data processing register, and has enabled the DPO (Data Protection Officer) to better organize his erasure (or anonymization) projects and, as a result, greatly minimize the risks of non-compliance.
The automation of the entire process has enabled our customer to launch regular scans, to prevent any long-term accumulation of non-legitimate personal data.
Product Benefits
Integrate
Seamless integration of AI and No-Code technology for effective data refinement.
Collaboration
Shareable
Visualize
Powerful
Quality
Achieve superior data quality faster and at a lower cost, while demonstrating the tangible value of investing in data excellence.