List the personal data your system keeps
Mark the table columns that hold personal data, then open the record of processing: the tables, the functions that use them and the outside systems the data flows to.
In short
Mark which columns of your tables hold personal data and of what kind, such as Contact or Financial. The functions that read or write them are flagged, and the record of processing lists it all: the tables and columns, the functions that use them and what each does, and the outside systems the data flows to.
Before you start
- Who: marking needs Edit on the design. The record shows what is in the designs you may open.
- Plan: marking personal data comes with the Business and Enterprise plans and the 14-day trial. Marks already on a design stay on other plans.
- First: a component whose Component detail has tables, such as one read from your code. See /help/designer/connect-your-code.
Steps
- On the canvas, double-click a component, or select it and press "Open what is inside".
- Select a table. In the inspector, under "Personal data", choose each column's kind, or "Not personal".
- Under "Suggested from the column names", press a suggestion, such as email as Contact, or "Mark all suggested".
Result: the table and the functions that read or write it wear a shield, and the line above the canvas says how many parts read or write personal data.
- On the Designer home, open the header menu and choose "Record of processing". Or press "Record of processing" in the line above the canvas.
- The report opens in Analytics. In the first drop-down, keep "All" for the whole workspace or choose one component.
- Read "Personal-data tables", "Functions that use personal data" and "Outside systems it flows to". Press "Save report" to keep a copy.
Good to know
- The kinds are Identity, Contact, Financial, Health, Location, Behaviour, Other and Special category.
- A suggestion is never set by itself: nothing is marked until you press it.
- The record names parts and systems, never a person.
- The record is drawn from what your designs say. A table or system the designs leave out is not in it.
- Each table of the record holds at most 1,000 rows.
- A saved or scheduled copy is read only by people who may open every design it is drawn from. To download it, see /help/analytics/download-a-report.
If something goes wrong
- "Marking personal data comes with the Business and Enterprise plans and the 14-day trial." - the marks already there stay, and nothing changes them.
- No "Personal data" in the inspector - the selected part is not a table, or the table has no columns yet.
- The record is empty - no column is marked yet, or the designs that hold the marks are not open to you.
Related
- /help/designer/connect-your-code
- /help/designer/threat-model
- /help/analytics/running-a-report