Topic results GDPR

CCH Central
User Consent
The document details the "Consents" tab in the "Extra" section for managing GDPR Consent for clients and contacts. Users can enter, edit, and report on consent details, including dates, sources, and associated documents. The document outlines mandatory fields such as "Date Received" and "Expiry Date" and specifies functionalities like associating consent documents or withdrawal documents if CCH Document Management is installed. It also covers bulk updating consent expiry dates and audit trail tracking for changes. Key permissions and limitations regarding extra fields and consent management are highlighted throughout.
More information
CCH Central
Export the Client or Contact Personal Data
This document provides detailed instructions for generating client or contact personal data files in both PDF and XML formats, focusing on the GDPR compliance process. It outlines steps such as selecting the main tab, using the generate functions, and handling output file locations based on the type of data generated. Warnings are provided regarding necessary settings within the software, and the document emphasizes the importance of templates and document management settings. It also describes the folder structure for saving generated files and notes specific scenarios impacting available options.
More information
CCH GDPR Compliance
CCH GDPR Compliance  MFA
The document outlines the implementation of multi-factor authentication (MFA) for users of the CCH GDPR Compliance application to enhance account security. It explains that users must provide two factors for access, specifically a password and a verification code sent via SMS or generated through a time-based one-time password (TOTP) app, such as Google Authenticator or Microsoft Authenticator. Instructions for downloading these apps and setting up SMS verification are provided, along with visual aids for the login process and MFA selection.
More information
Onboarding
GDPR
The document discusses the General Data Protection Regulation (GDPR) implemented on May 25, 2018, which protects personal data in the European Union. It emphasizes Wolters Kluwer's commitment to data privacy, highlighting the functionalities of their CCH Central suite releases that support GDPR compliance, such as consent management and data access reporting. Additionally, it introduces CCH GDPR Compliance, a tool for organizations to simplify compliance processes and train staff. The document also outlines Wolters Kluwer's ongoing efforts to enhance data protection measures and provides notifications regarding changes in sub-processors related to GDPR.
More information
CCH GDPR Compliance
Stakeholder training and awareness
The document discusses the importance of staff awareness and compliance in data protection programs within organizations. It highlights the necessity of training employees on relevant policies and providing documentation of their understanding and acceptance. The CCH GDPR Compliance tool is introduced, which allows organizations to distribute policies, track employee receipt and acceptance, and monitor compliance status with visual indicators. It emphasizes the need for a record of training efforts and offers templates for communication, ensuring all employees are informed and compliant.
More information
CCH GDPR Compliance
Simplifying Data Subject Access Requests (DSAR)
This document outlines the rights of individuals regarding their personal data and how organizations can facilitate the exercise of these rights. It emphasizes the importance of allowing easy access to rights through communication channels. The process for handling Data Subject Access Requests (DSAR) is detailed in three steps: receiving and logging requests via a customizable online form, validating requests by confirming the requester's identity, and responding appropriately to the request while ensuring compliance. The document stresses the importance of training staff and maintaining records for accountability and transparency.
More information
CCH GDPR Compliance
Responding to data breaches
This document discusses the importance of effective breach management in compliance with GDPR, highlighting the challenges many organizations face in acknowledging breaches. It introduces CCH GDPR Compliance as a solution, detailing its workflow for logging breaches, managing responses, and assessing incidents. Key features include understanding causes, assembling response teams, risk evaluation, and facilitating communication with supervisory authorities and affected data subjects. The tool also provides downloadable reports and maintains a historical breach log for future learning and prevention efforts.
More information
CCH Central
Personal Data
The document outlines the GDPR definition of Personal Data and describes how CH Central allows users to identify and manage personal information within the system. Users can designate Extra Fields and Association Types as Personal Data, which are visually marked with icons in various screens, including the Client and Contact screens and the Add New Client or Contact Wizard. This enhancement facilitates compliance with GDPR by enabling practices to track and manage personal information effectively.
More information
CCH Central
GDPR Deletion
This document outlines the GDPR compliance features of CCH Central, particularly regarding client and contact data deletion. It explains the enhanced deletion routine that verifies if data can be erased, displays a dialog for confirmation, and establishes a GDPR Deletion Date for cases where deletion is not immediately possible. The document also addresses the deletion of Audit Trail entries and personal data files, including the management of employee records by disabling logins. Users can view and report on the GDPR Deletion Date in the system.
More information
CCH Central
GDPR for CCH Document Management
This document outlines the integration of a new "GDPR Collection" document type in CCH Document Management, designed to help users manage GDPR-compliant documentation. The document type is linked to the Client Filing library and allows for the creation of a PDF collection through an updated "Create PDF" option. The process for creating a GDPR collection is detailed in a step-by-step format, providing users with clear instructions. Upon completion, the PDF files are uploaded to the Document Centre, categorized under the new GDPR Collection type.
More information
CCH GDPR Compliance
Ensuring third parties are compliant
This document emphasizes the importance of managing personal data shared with third parties, particularly concerning GDPR compliance. It highlights the necessity for written agreements outlining data processing practices and the need for meticulous logging of data transfers. The document addresses the complexities of sharing data with both processors and controllers, including specific legal obligations when processors are outside the EU. It underscores the distinct legal responsibilities between controllers and processors and recommends mapping these relationships for clarity and compliance. Additionally, it offers tools for generating agreements and recording legal bases for data sharing.
More information
CCH GDPR Compliance
Do you need a Data Protection Officer?
The document emphasizes the importance of human involvement in achieving GDPR compliance, highlighting that organizations must protect individuals' data through established processes. It introduces CCH GDPR Compliance as a collaborative workflow tool where team administrators can grant access to users, including external Data Protection Officers (DPOs). The document outlines the necessity of appointing a qualified DPO based on regulatory requirements and encourages organizations to assess their need for one. For questions regarding DPO appointments, it directs readers to CCH Software Support for assistance.
More information
CCH GDPR Compliance
Demonstrating your compliance with privacy notices
The document discusses the importance of providing a clear and accessible privacy notice to data subjects, which informs them about data processing and protection compliance. It outlines the necessity of making the notice available at the time of data collection or within one month if obtained from a third party. The CCH GDPR Compliance tool aids in drafting tailored privacy notices using data mapping efforts, allowing customization and easy sharing. Key instances when data subjects must be notified include data collection, communication of rights, data breaches, and significant changes in data processing.
More information
CCH GDPR Compliance
Data protection by design with DPIAs
This document outlines the importance of conducting Data Protection Impact Assessments (DPIAs) to integrate data protection into business practices, emphasizing compliance with GDPR. It describes the DPIA process, which includes detailing data processing, identifying risks, and implementing mitigation strategies. High-risk processing activities, such as handling vulnerable individuals' data or large volumes of information, necessitate a DPIA. The document also explains the key components a DPIA should contain and the workflow involved in drafting, reviewing, and approving it. Ultimately, it aims to ensure organizations demonstrate compliance and protect individuals' data rights effectively.
More information
CCH GDPR Compliance
Completing your gap analysis
The document emphasizes the importance of conducting a compliance and risk assessment to identify gaps in organizational compliance and assess inherent risks, particularly regarding personal data protection. It prompts organizations to review consent practices, data management, and cybersecurity controls, as well as their human resource policies. Additionally, it highlights high-risk processing activities, such as handling data of vulnerable individuals or large data volumes, which necessitate a Data Protection Impact Assessment (DPIA). The provided software tools can help document and evaluate these processes to enhance compliance.
More information
CCH GDPR Compliance
Building your data register
The document outlines the importance of mapping personal data usage to establish an effective data protection program. It emphasizes responding to inquiries and security breaches requires a detailed data map. CCH GDPR Compliance provides tools for constructing this map, ensuring compliance and adequate protection measures. Successful mapping necessitates collaboration among different teams (HR, Sales, Marketing, IT), customization to specific needs, and thorough tracking of data flows to third parties. The overall message is that visibility into personal data processing is crucial for effective management and protection.
More information
CCH GDPR Compliance
Before you start
The document outlines the steps required to configure a CCH GDPR Compliance account tailored to an organisation's specific needs. It emphasizes that no universal solution exists due to varying data handling across different organisations. Key configuration steps include entering organisational details, location, GDPR compliance officers, and assessing specific needs based on company size. The document also notes limitations during the trial phase, such as restricting user additions and document downloads, and provides guidance on subscribing for full access.
More information
CCH Central
Audit Trail
The "Report Audit Trail" feature in CCH Reporting allows users to track the history of report generation and Excel file exports. It displays details such as report names, parameters, the employee who ran the report, and timestamps. Users can filter records by date and report type. Additionally, the audit trail records can be manually or automatically deleted, with options to set deletion frequency and next deletion date. The default automatic deletion occurs at 11 PM, and administrators can modify these settings as needed.
More information