The Privacy4U application on the ServiceNow platform, provides organizations with an industry recognized best practice toolset. The solution enables the privacy organization to meet the regulatory privacy requirements, while minimizing the impact on the operational efficiency.
The following key benefits are achieved with this solution:
Registry of personal data processing (Records of processing):
- Streamline and optimize the administrative process of documenting and maintaining the registry of personal data.
- Provide the privacy organization with real-time, enterprise-wide insight into PII processing activities.
- Allow multidisciplinary teams from key areas of governance (IT, HR, Finance, Legal) to collaborate in a single platform.
Data protection impact assessments (DPIA):
- Perform (GDPR) Data Protection Impact Assessments following best practice workflows and key process steps.
- Have the required auditable documentation ready and complete in a single repository
- Quick scan capability for initial risk scoring.
- Pre-configured, easily customizable DPIA questionnaires to perform the complete DPI
- Integrating Privacy4U with ServiceNow IRM (optional)
Data breach workflow:
- A pre-defined workflow for handling and monitoring the PII data breach incident and response process
- Real-time insights and dashboards into PII data breach incidents
- Integration with ITSM (and SecOps) products
Following a standardized workflow for managing data subject requests
- Easily manage Data Subject requests with a standardized workflow and collaborate with different stakeholders in the organization using a single platform of record and action
- Integrate seamlessly with Customer Service Management to streamline the end-to-end process
- Leverage the data processing registry and CMDB to quickly identify how and where to isolate the PII requested
The Privacy4U application enables the privacy office within organizations to streamline collaboration between the different stakeholders and actors such as Business Application owners, Business Process owners, Risk and Compliance officers. As these functions often work in siloes, and rely on manual, error-prone processes, this increases cost, it negatively impacts operational excellence and it finally increases risk of non-compliance.
The following core use-cases are supported:
- Registry of Personal Data Processing
- Data Protection Impact Assessments
- Data Breaches
- Data Subject Requests
The following features are included:
- Workspace
- DPIA Risk assessment with automatic score calculation
- DPIA Quick Scan with automatic score calculation
- Available in English, German, Dutch, French
- Record producers for the portal
- Approval logic
- Integration with CSDM (Business Application and Information Objects)
V2.0.0 release notes:
- Added Privacy4U Workspace
- Added DPIA Risk Assessment
- Added support for the following languages: German, Dutch, French
- Added DPA notifications
- Improved DPIA Quick Scan Assessment
- Improved security throughout the application
- Improved user experience throughout the application
- Improved approval logic within the DPIA and DPA processes
- Personal Data Type table is replaced by the CSDM Information Objects table
- Fixed bugs
V1.0.7 release notes:
- Inital release
Mandatory: none
Optional: IRM