GDPR Stage

The GDPR Stage displays 1 of the 13 stages of the GDPR Framework, each GDPR Stage is broken down into a number of sections, each section will ask a key question to determine if your organisation is operating within the GDPR guidelines.  The questions require either a Yes, No or Not Sure answer. 

The section question will provide a reference to which GDPR Articles the question is checking against, all Articles are available to be viewed by clicking the link in the section question, by using the main menu option "GDPR Articles" or by using the "Options" menu to display the articles on the screen at all times whilst navigating the Framework.  You will also find a (more) link to provide additional information on what sort of evidence is required.

If you answer Yes, then you must provide evidence to demonstrate why you answered yes, this may be in the form of a document, policy, procedure, registers, log files, etc.

If you answer No, then you must begin a process to enable you to eventually answer Yes, this process is usually started by creating an action to have a meeting or write a procedure or seek advice or do some research.

If you answer Not Sure, then like answering no, you must begin a process to enable you to eventually answer Yes, this process is usually started by creating an action to have a meeting or seek advice or do some research.

"At all parts of going through the framework you are ancouraged to create actions as it demonstrates and provides evidence that you are actively working towards being compliant.  The action process will log your activity and remind you to complete the actions in a timely manner. "

The objective of each section is to obtain a Yes answer, but on your first visit to the section you might answer No or Not Sure.  What happens next is a process to demonstrate how you can achieve a Yes answer.  The section framework has a number of Tabs to support this process.

• Justification/Notes: A free format text area to describe why you have answerd Yes to this section question.  For example you might have a related document or policy or procedure that demonstrates how you work to comply with the GDPR Guidelines.
• Actions: All actions related to this section can be created, edited and managed within this tab.  For example if you need to have a meeting, remind your self to modify a procedure, go and visit a supplier, speak to a speciallist, etc.  log that action within this tab, it all goes to demonstrate that your organisation is pro-actively pursuing compliancy.
• Assessments: In trying to obtain a Yes answer to this section you might have to carry out a number of assessments.  The assessment tab allows all related assessments to be created, edited and managed.  An assessment might be a Data Mapping exercise, a Risk Assessment, a GAP analysis, a supplier assessment, etc.
• Data/Locations: The section question may relate to Personal Data, or as a result of an assessment or meeting you require to document what data is stored at particular locations.  This tab allows you to allocate Data Types to your Data Locations, this is essential in understanding where Personal Data is being stored so the data can be managed and secured effectively.
• Documents: One of the key features of GDPR Sotware is the in-built library of documents, policies and procedures, each document that is relevant as evidence for this section is prefixed with the Stage and Section number, so you can locate and select the relevant document.  A comment icon will appear on the Documents tab if you have loaded the sample documents to indicate there is a document available.  Remember each document must be customised for your organisation AND edited to reflect how you actually work, if you intend to change the way you work and follow the sample documentation, then you must put in place evidence to demonstrate that you are now following a new process.

If this section question has been updated, or a new section has been added then the section title bar will display the words "New" or "Updated" and a Update Summary Information box will be displayed explaining what has changed and any recommendations to assist you in managing that change.  Once you have read the update information, click the Reviewed button to remove the Update Summary Information box.