Data protection dashboard

The Data Protection Dashboard provides experts, professionals and observers with information about the status of processing activities, TOMs and TOCs of the data protection management system. Various key performance indicators (KPIs) are provided for this purpose.

Data protection KPIs

The following KPIs are available for the privacy dashboard. How to customize and create dashboards is described in Create and edit dashboards.

Betroffenenkategorien nach VT Status

Dieser KPI gibt Auskunft über die Betroffenenkategorien anhand ihres Vorkommens in Verarbeitungstätigkeiten. Dabei werden die Verarbeitungstätigkeiten anhand ihres Status gelistet.

Dafür kann eingeschränkt werden, welche Verarbeitungstätigkeiten betrachtet werden sollen. Es gibt folgende Einschränkungsmöglichkeiten:

Alle verwendeten Betroffenenkategorien

Alle Betroffenenkategorien die in Verarbeitungstätigkeiten vorkommen, egal für welche Verantwortlichkeit und Organisations- / Gesellschaftsregister.

Nach interne Verantwortlichkeit

Nur Betroffenenkategorien die in Verarbeitungstätigkeiten vorkommen, bei denen die Verantwortlichkeit intern liegt. Dabei kann weiters eingeschränkt werden, welche internen Verantwortlichkeiten berücksichtigt werden sollen.

Nach Organisationsregister

Nur Betroffenenkategorien die in Verarbeitungstätigkeiten vorkommen, die den ausgewählten Organisationsregistern zugewiesen sind.

Nach Gesellschaftsregister

Nur Betroffenenkategorien die in Verarbeitungstätigkeiten vorkommen, die den ausgewählten Gesellschaftsregistern zugewiesen sind.

Durch Doppelklicken auf einen Balken öffnet sich ein Dialog, in dem die jeweiligen Verarbeitungstätigkeiten aufgelistet werden. Die Verarbeitungstätigkeiten können auch mittels Doppelklick geöffnet werden.

Die Einschränkungen und Selektion der Verantwortlichkeiten, Organisationsregistern und Gesellschaftsregistern kann entweder fix im Bearbeitungsmodus erfolgen, oder es wird die Selektion im Ansichtsmodus freigeschalten.

TOCs by status

This KPI provides information on the status of general, specific TOCs (technical and organizational controls) or on the status of controls assigned to DPIAs (data protection impact assessments).

For this purpose, there are the following options for the donut chart:

All general TOCs

All controls that apply to all processing activities.

Specific TOKs

The controls specific to the selected processing activity.

Controls over DPIA

The controls assigned to the selected DPIA.

Double-clicking on a circle segment opens a dialog in which the respective controls are listed. The controls can also be opened by double-clicking.

The selection of controls and processing activity or DSFA can be either fixed in editing mode, or the selection is enabled in view mode.

TOMs by status

This KPI provides information on the status of general, specific TOMs (technical and organizational measures) or on the status of measures assigned to DPIAs(data protection impact assessments).

For this purpose, there are the following options for the donut chart:

All general TOMs.

All measures that apply to all processing activities.

Specific TOMs

The measures specific to the selected processing activity.

Measures related to DPIA

The measures assigned to the selected DPIA.

Double-clicking on a circle segment opens a dialog in which the respective measures are listed. The measures can also be opened by double-clicking.

The selection of measures and processing activity or DSFA can either be fixed in editing mode, or the selection is enabled in view mode.

Processing activities by status

This KPI provides information on the current status of processing activities.

For this purpose, it is possible to select which processing activities should be considered. The following restriction options are available:

All processing activities

All processing activities, regardless of responsibility and organizational/company register.

By internal responsible

Only processing activities for which the responsibility is internal. It is also possible to restrict which internal responsibilities are to be taken into account.

By external responsible

Only processing activities for which the responsibility is external. It is also possible to restrict which external responsibilities are to be taken into account.

By organizational register

all processing activities assigned to the selected organizational registers.

By company register

all processing activities that are assigned to the selected company registers.

By joint responsibility

all processint activities with the marker "joint responsibility".

Double-clicking on a circle segment opens a dialog listing the respective processing activities. The VTs can also be opened by double-clicking.

Restrictions and selection of responsibilities, organization registers and company registers can be done either fixed in editing mode, or selection is enabled in view mode.