What is this workspace template for?
Data Categories define, at a high level, the types of data that your organization uses. Having this higher-level definition of data makes it easier to understand which of your Policies pertain to which types of data.
Examples of data categories: sensitive personal data, health data, basic personal data. You may also choose to add another level of categorization to highlight the lawful basis of usage for example “basic personal data – consent” as this may have different retention policies than “basic personal data – legal obligation”.
Component types contained in this template
- Data category
The Data Category component is used to better manage your policies and provide an overview of the type of data you are using/processing etc.
Reference types contained in this template
- Consists of
- Depends on
The Consists of reference type is used between a Data Category and the relevant Data Entities and Partial Entities.
The Depends on reference type may be used if you wish to have nested categorizations. An example might be that you have a Basic Personal Information categorization but better define the underlying subcategories such as those collected on basis of consent etc.
Fields contained in this template
- Personal data (checkbox)
- Sensitivity Level (list)
List all your data categories:
- For this purpose, use the component type “Data category”.
- Document whether each category constitutes personal data or not by checking (or leaving unchecked) the field “Personal data (checkbox)”.
- Document how sensitive each category is by selecting the appropriate value on the scale in the field “Sensitivity Level (list)”.
Map which data entities each category comprises:
Use the reference type “Consists of”, taking care to be consistent when selecting the source- and the target component. The source component should always be of the type “Data category”. The target component should always be of the type “Data Entity”, which should be documented in its own master data workspace.