GDPR
GDPR, legal hold and destruction you can prove.
by Bluemark
Personal data, governed — not merely declared
Business Plus Privacy adds the compliance layer on top of your document register: processing purposes, consents and their expiry, data subject requests, legal hold on a document and controlled destruction, with an access log and a destruction log.
What you get
Processing purposes
The lawful basis for keeping each data category, defined once and applied to your document types.
Consents with an expiry date
The consents you received, with their validity; expiry is tracked automatically instead of being remembered by someone.
Data subject requests
Access, rectification, erasure — logged, numbered and carried through to the end, with a deadline.
Legal hold
A document under litigation cannot be destroyed, and the reason for the hold must be written down.
Destruction you can prove
A destruction log: what was destroyed, who approved it and when — even after the file itself is gone.
Access log
Who opened a document holding personal data, and when.
The destruction log
Every destroyed document survives as evidence: what it was, who approved it, when it was carried out and on what basis. The file goes; its trace stays.
Which questions does it answer for you?
- On what lawful basis do we keep each category of personal data?
- Which consents do we hold, and which have expired?
- What data subject requests did we receive, and where do they stand?
- Which documents must not be destroyed because they are under litigation?
- In an inspection, can we prove what we destroyed and who approved it?
- Who had access to the documents holding personal data?
Value for the organisation
- Turns your privacy policy into rules that are enforced, not a document on the intranet
- Reduces the risk of destroying something you were obliged to keep
- Shortens the answer to a data subject request, from a search to a list
- Leaves the evidence where the act happened — an access log and a destruction log
- Keeps compliance in the same system as the documents, not in a parallel register
You know what personal data you hold, why, and until when — and you can prove what you destroyed.