Dynamics 365 for GDPR

Introduction

Need help with GDPR? We have the knowledge, experience and the technology to help your organisation achieve compliance.

General Data Protection Regulation (GDPR) is a data protection and privacy regulation for all individuals within the European Union but also applies to external entities handling their personal data. Since May 2018, the implementation of new GDPR legislation, means organisations must adopt and implement data privacy processes.

GDPR offers many challenges to organisations and affects the way businesses collect, store and secure personal customer data. This means that GDPR impacts virtually all Dynamics 365 areas as all personal data from customers’ needs to be handled in a manner that fully complies with the legislation.

The good news is that Dynamics 365 is an extensible, customisable and secure platform that can actually help any company in this data privacy journey without representing a significant investment of resources (people, time and money).

In summary, GDPR and Dynamics 365 have a lot in common as both are about building deeper trust and loyalty with new and existing customers through the professional handling of personal customer data. However, how to implement data privacy processes and how to achieve GDPR compliance is not always obvious and failure can have severe ramifications. In Codec, our goal is to help our customers and with Dynamics 365 for GDPR we have the knowledge, experience and the technology to help achieve GDPR compliance.

What is included?

Contact

Data Subject Requests

Configure and execute processes to anonymise or delete data that is considered Personally Identifiable Information (PII).

Personally Identifiable Information

Identify which data structures store PII. Define a PII Schema, associate the identified entities and fields that hold PII data and publish it.

Data Processing

Enable organisations with a complete and comprehensive tracking system to manage all associated processing activities.

Data Anonymisation

Configure and execute processes to anonymise or delete data that is considered Personally Identifiable Information (PII).

Rectification Requests

Help organisations validating the identity of the requester following pre-defined internal steps to guarantee compliance, security and data accuracy.

Data Portability

Ability to provide data subjects with a copy of their personal data kept by the data controller. Data can be exported in XML and JSON formats.

Data Retention Rules

Enable organisations with the ability to configure Data Retention rules and schedule recurring Data Deletion/Data Anonymisation processes.

Data Security Breaches

Store, monitor, document and handle data security breaches by automating responses and notifying the responsible within the defined 72 hours interval.