The tour follows a practical operating sequence. Each step connects the responsible team, the required record, the action to be completed, and the evidence retained.
Operating view
Processing purpose
Customer onboarding
Responsible team · Privacy and legal
Privacy notice
Approved version
Published
Consent decision
Recorded
History available
Data Principal request
Assigned
In progress
Evidence package
Ready for review
Package prepared
Stage 1 of 6
Map personal data and processing
Begin with the organisation's real data environment.
Record business areas, systems, databases, files, processors, data categories, responsible owners, and processing activities. Use discovery workflows to identify information that requires review and classification.
Begin with the organisation's real data environment.
Record business areas, systems, databases, files, processors, data categories, responsible owners, and processing activities. Use discovery workflows to identify information that requires review and classification.
Document why personal data is processed and how that processing is governed.
Connect each purpose with the relevant personal data, applicable processing ground, responsible function, processors, retention requirement, and current status.
Prepare clear notices and consent experiences for the relevant service or processing activity.
Record the notice version shown to the Data Principal, the consent decision, the time of the decision, and any later withdrawal. Make the withdrawal process accessible through the configured channel.
Stage 5. Carry out retention, erasure, and suppression
Convert an approved decision into accountable operational work.
Create actions for configured systems, monitor execution, manage exceptions, retry failed work, and retain the verification information available from each system.