Topic results Data Protection

CCH Central
User Consent
The document details the "Consents" tab in the "Extra" section for managing GDPR Consent for clients and contacts. Users can enter, edit, and report on consent details, including dates, sources, and associated documents. The document outlines mandatory fields such as "Date Received" and "Expiry Date" and specifies functionalities like associating consent documents or withdrawal documents if CCH Document Management is installed. It also covers bulk updating consent expiry dates and audit trail tracking for changes. Key permissions and limitations regarding extra fields and consent management are highlighted throughout.
More information
CCH Central
Export the Client or Contact Personal Data
This document provides detailed instructions for generating client or contact personal data files in both PDF and XML formats, focusing on the GDPR compliance process. It outlines steps such as selecting the main tab, using the generate functions, and handling output file locations based on the type of data generated. Warnings are provided regarding necessary settings within the software, and the document emphasizes the importance of templates and document management settings. It also describes the folder structure for saving generated files and notes specific scenarios impacting available options.
More information
CCH Central
Personal Data
The document outlines the GDPR definition of Personal Data and describes how CH Central allows users to identify and manage personal information within the system. Users can designate Extra Fields and Association Types as Personal Data, which are visually marked with icons in various screens, including the Client and Contact screens and the Add New Client or Contact Wizard. This enhancement facilitates compliance with GDPR by enabling practices to track and manage personal information effectively.
More information
CCH Central
GDPR Deletion
This document outlines the GDPR compliance features of CCH Central, particularly regarding client and contact data deletion. It explains the enhanced deletion routine that verifies if data can be erased, displays a dialog for confirmation, and establishes a GDPR Deletion Date for cases where deletion is not immediately possible. The document also addresses the deletion of Audit Trail entries and personal data files, including the management of employee records by disabling logins. Users can view and report on the GDPR Deletion Date in the system.
More information
CCH Central
GDPR for CCH Document Management
This document outlines the integration of a new "GDPR Collection" document type in CCH Document Management, designed to help users manage GDPR-compliant documentation. The document type is linked to the Client Filing library and allows for the creation of a PDF collection through an updated "Create PDF" option. The process for creating a GDPR collection is detailed in a step-by-step format, providing users with clear instructions. Upon completion, the PDF files are uploaded to the Document Centre, categorized under the new GDPR Collection type.
More information
CCH GDPR Compliance
Do you need a Data Protection Officer?
The document emphasizes the importance of human involvement in achieving GDPR compliance, highlighting that organizations must protect individuals' data through established processes. It introduces CCH GDPR Compliance as a collaborative workflow tool where team administrators can grant access to users, including external Data Protection Officers (DPOs). The document outlines the necessity of appointing a qualified DPO based on regulatory requirements and encourages organizations to assess their need for one. For questions regarding DPO appointments, it directs readers to CCH Software Support for assistance.
More information
CCH GDPR Compliance
Data protection by design with DPIAs
This document outlines the importance of conducting Data Protection Impact Assessments (DPIAs) to integrate data protection into business practices, emphasizing compliance with GDPR. It describes the DPIA process, which includes detailing data processing, identifying risks, and implementing mitigation strategies. High-risk processing activities, such as handling vulnerable individuals' data or large volumes of information, necessitate a DPIA. The document also explains the key components a DPIA should contain and the workflow involved in drafting, reviewing, and approving it. Ultimately, it aims to ensure organizations demonstrate compliance and protect individuals' data rights effectively.
More information
CCH Central
CCH Central: Data Security and Protection Consultancy
This document outlines a consultancy program aimed at enhancing the data security and protection setup of CCH Central. It includes a review of existing procedures, best practice guidance, and necessary database adjustments. The course is delivered in two sessions, focusing on specific security settings and checks. Intended for System Administrators, IT staff, and CCH Central Champions, participants should have prior knowledge of CCH Central. The program also addresses recent changes in data security and compliance requirements within the software. Additional resources for learning and support are provided.
More information
CCH GDPR Compliance
Building your data register
The document outlines the importance of mapping personal data usage to establish an effective data protection program. It emphasizes responding to inquiries and security breaches requires a detailed data map. CCH GDPR Compliance provides tools for constructing this map, ensuring compliance and adequate protection measures. Successful mapping necessitates collaboration among different teams (HR, Sales, Marketing, IT), customization to specific needs, and thorough tracking of data flows to third parties. The overall message is that visibility into personal data processing is crucial for effective management and protection.
More information
CCH Central
Audit Trail
The "Report Audit Trail" feature in CCH Reporting allows users to track the history of report generation and Excel file exports. It displays details such as report names, parameters, the employee who ran the report, and timestamps. Users can filter records by date and report type. Additionally, the audit trail records can be manually or automatically deleted, with options to set deletion frequency and next deletion date. The default automatic deletion occurs at 11 PM, and administrators can modify these settings as needed.
More information