HOPEX Aquila EN

PRIVACY - Privacy Management > Describing Processing Activities > Processing Activity Details > Data Subject Right and Notice Management

Data Subject Right and Notice Management

This section is available from the Details tab of the processing activity property page.

In this section you can specify the following:

• the data subjects' rights granted by this processing activity.

See Specifying data subject rights for a processing activity for more information.

• how the notice is managed (in writing, orally, not required)

To view a notice management report of all processing activities, see NoticeThird-Parties.

• whether specific consent is collected or not

Consent is a freely given, specific, informed and explicit consent by statement or action signifying agreement to the processing of their personal data.

Specifying data subject rights for a processing activity

You can specify the rights that have been taken into account in your processing activity.

A least one data subject right must be selected here.

• Access

Right to Access entitles the data subject to have access to and information about the personal data that a controller has concerning them.

• Object

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her

• Restriction

The data subject shall have the right to obtain from the controller restriction of processing.

• To be forgotten

The Right to be forgotten is also known as Data erasure. it entitles the data subject to have the data controller erase his/her personal data, cease further dissemination of the data, and potentially have third parties cease processing of the data.

• Deletion

A data subject may also have the right to have you delete data that you keep on him or her.

• Portability

Data Portability is the requirement for controllers to provide the data subject with a copy of his or her data in a format that allows for easy use with another controller.

• Rectification

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her.

Viewing data subject rights for all your processing activities

As an activity or application owner, you may want to view the data subject rights of the processing activities you are responsible for.

HOPEX Privacy Management provides a report for this.

To have a general view of the data subject rights:

In the processing activity owner desktop, click Reports > Data Subjects' rights.

Giving a compliance score for data subject rights

The Privacy team can later give a global compliance score for this section based on the above mentioned information. To do so:

Select a value from the Data Subjects' rights and notice management Compliance level drop-down menu.