Appendix: Action Plan Workflows
Two workflows are proposed to manage the different steps of an action plan:
A Bottom-Up workflow, which corresponds to the case where an action plan is created by any user, for example a processing activity owner. Here the new action plan must be validated by an approver before being implemented.
A Top-Down workflow, which corresponds to the case where an action plan is created by an "action plan manager", for example the DPO.
Bottom-Up Action Plan Workflow
Top-down Action Plan Workflow
Action Workflow
Notifications are sent by the creator to the responsible user:
when the action is assigned to a user,
when the action is closed.