GDPR and the AIC Kits
Analog Informatics Corporation (AIC) kits support the security and accountability duties in the General Data Protection Regulation (GDPR). The controller answers data subjects and supervisory authorities. A supervisory authority decides compliance. This page is not legal advice.
Article Map
| Article | What the Kit Does |
|---|---|
| Article 5 Principles, including accountability | Audit and the Assessment Binder record the processing the kit performs. |
| Article 15 Right of access | A person-level export of kit records is planned. The controller answers the request. |
| Article 16 Right to rectification | Account data in the kit can be corrected. |
| Article 17 Right to erasure | Kit accounts can be removed when the controller directs it. Other systems stay with the controller. |
| Article 24 Responsibility of the controller | The Assessment Binder stores measures and records. |
| Article 25 Data protection by design and by default | Least privilege, vaulted credentials, and cryptography are built into the Level 2 and Level 3 kits. |
| Article 28 Processor | Processor terms stay with the parties. A Managed Service Provider can operate inside the kit. |
| Article 30 Records of processing activities | The Assessment Binder stores the record. |
| Article 32 Security of processing | Access control, cryptography, audit, and continuous monitoring. |
| Article 33 Notification of a breach to the supervisory authority | Incident Response records the event and can alert. Notification stays with the controller. |
| Article 34 Communication of a breach to the data subject | Communication stays with the controller. |
| Article 35 Data protection impact assessment | The assessment stays with the controller. The Assessment Binder stores it. |
Screenshots
More on Product Screenshots.
An assessment organization, certification body, or regulator decides whether a requirement is satisfied.