4. Documenting Data Sensitivity

You can document data and its sensitivity in different objects in QualiWare including: Information Concept, Data Entity, Attribute and Business Object.

 

Under Classification in the objects’ properties, you can classify the information as open, internal, restricted or classified, and register the privacy level as either common personal data, sensitive personal data, or blank (neither personal nor sensitive data).

You can also insert the result of an impact analysis, estimating damages regarding availability, confidentiality, correctness and traceability.

This information is then used to in the GDPR sensitive data view and can help identify which processes should be high priority when working with GDPR compliance:

The information about data sensitivity can then also be used for risk management, which will be explained on the ‘Documenting Risk’ page.