CCH GDPR Compliance
A complete solution to GDPR compliance and training.
CCH GDPR Compliance
CCH GDPR Compliance MFA
The document outlines the implementation of multi-factor authentication (MFA) for users of the CCH GDPR Compliance application to enhance account security. It explains that users must provide two factors for access, specifically a password and a verification code sent via SMS or generated through a time-based one-time password (TOTP) app, such as Google Authenticator or Microsoft Authenticator. Instructions for downloading these apps and setting up SMS verification are provided, along with visual aids for the login process and MFA selection.
CCH GDPR Compliance
Stakeholder training and awareness
The document discusses the importance of staff awareness and compliance in data protection programs within organizations. It highlights the necessity of training employees on relevant policies and providing documentation of their understanding and acceptance. The CCH GDPR Compliance tool is introduced, which allows organizations to distribute policies, track employee receipt and acceptance, and monitor compliance status with visual indicators. It emphasizes the need for a record of training efforts and offers templates for communication, ensuring all employees are informed and compliant.
CCH GDPR Compliance
Simplifying Data Subject Access Requests (DSAR)
This document outlines the rights of individuals regarding their personal data and how organizations can facilitate the exercise of these rights. It emphasizes the importance of allowing easy access to rights through communication channels. The process for handling Data Subject Access Requests (DSAR) is detailed in three steps: receiving and logging requests via a customizable online form, validating requests by confirming the requester's identity, and responding appropriately to the request while ensuring compliance. The document stresses the importance of training staff and maintaining records for accountability and transparency.
CCH GDPR Compliance
Responding to data breaches
This document discusses the importance of effective breach management in compliance with GDPR, highlighting the challenges many organizations face in acknowledging breaches. It introduces CCH GDPR Compliance as a solution, detailing its workflow for logging breaches, managing responses, and assessing incidents. Key features include understanding causes, assembling response teams, risk evaluation, and facilitating communication with supervisory authorities and affected data subjects. The tool also provides downloadable reports and maintains a historical breach log for future learning and prevention efforts.
CCH GDPR Compliance
Ensuring third parties are compliant
This document emphasizes the importance of managing personal data shared with third parties, particularly concerning GDPR compliance. It highlights the necessity for written agreements outlining data processing practices and the need for meticulous logging of data transfers. The document addresses the complexities of sharing data with both processors and controllers, including specific legal obligations when processors are outside the EU. It underscores the distinct legal responsibilities between controllers and processors and recommends mapping these relationships for clarity and compliance. Additionally, it offers tools for generating agreements and recording legal bases for data sharing.
CCH GDPR Compliance
Do you need a Data Protection Officer?
The document emphasizes the importance of human involvement in achieving GDPR compliance, highlighting that organizations must protect individuals' data through established processes. It introduces CCH GDPR Compliance as a collaborative workflow tool where team administrators can grant access to users, including external Data Protection Officers (DPOs). The document outlines the necessity of appointing a qualified DPO based on regulatory requirements and encourages organizations to assess their need for one. For questions regarding DPO appointments, it directs readers to CCH Software Support for assistance.
CCH GDPR Compliance
Demonstrating your compliance with privacy notices
The document discusses the importance of providing a clear and accessible privacy notice to data subjects, which informs them about data processing and protection compliance. It outlines the necessity of making the notice available at the time of data collection or within one month if obtained from a third party. The CCH GDPR Compliance tool aids in drafting tailored privacy notices using data mapping efforts, allowing customization and easy sharing. Key instances when data subjects must be notified include data collection, communication of rights, data breaches, and significant changes in data processing.
CCH GDPR Compliance
Data protection by design with DPIAs
This document outlines the importance of conducting Data Protection Impact Assessments (DPIAs) to integrate data protection into business practices, emphasizing compliance with GDPR. It describes the DPIA process, which includes detailing data processing, identifying risks, and implementing mitigation strategies. High-risk processing activities, such as handling vulnerable individuals' data or large volumes of information, necessitate a DPIA. The document also explains the key components a DPIA should contain and the workflow involved in drafting, reviewing, and approving it. Ultimately, it aims to ensure organizations demonstrate compliance and protect individuals' data rights effectively.
CCH GDPR Compliance
Completing your gap analysis
The document emphasizes the importance of conducting a compliance and risk assessment to identify gaps in organizational compliance and assess inherent risks, particularly regarding personal data protection. It prompts organizations to review consent practices, data management, and cybersecurity controls, as well as their human resource policies. Additionally, it highlights high-risk processing activities, such as handling data of vulnerable individuals or large data volumes, which necessitate a Data Protection Impact Assessment (DPIA). The provided software tools can help document and evaluate these processes to enhance compliance.
CCH GDPR Compliance
Building your data register
The document outlines the importance of mapping personal data usage to establish an effective data protection program. It emphasizes responding to inquiries and security breaches requires a detailed data map. CCH GDPR Compliance provides tools for constructing this map, ensuring compliance and adequate protection measures. Successful mapping necessitates collaboration among different teams (HR, Sales, Marketing, IT), customization to specific needs, and thorough tracking of data flows to third parties. The overall message is that visibility into personal data processing is crucial for effective management and protection.
CCH GDPR Compliance
Before you start
The document outlines the steps required to configure a CCH GDPR Compliance account tailored to an organisation's specific needs. It emphasizes that no universal solution exists due to varying data handling across different organisations. Key configuration steps include entering organisational details, location, GDPR compliance officers, and assessing specific needs based on company size. The document also notes limitations during the trial phase, such as restricting user additions and document downloads, and provides guidance on subscribing for full access.
CCH GDPR Compliance
Adding and editing Custom Checklists
This guide outlines changes to the process for users of PrivIQ’s standard version regarding AI-generated capabilities in risk assessments and compliance checklists. Key features include instructions for adding sections and sub-sections, adjusting risk levels, and editing items within the checklists. Users can upgrade to the premium version to access a full AI Guide. Important notes include the necessity of saving changes frequently and the ability to import items from CSV files into existing sub-sections.