Privacy management in order with a PMS
As a DPO, privacy officer or CISO, you want to know which personal data your organisation processes, where the risks are and how you demonstrate this. At the same time, human error happens easily: an email sent to the wrong person or a lost laptop, and you have a data breach. With the PMS, the privacy management software in Key Control Dashboard, you manage processing activities, DPIAs, data subject requests and data breaches in one environment. When a breach occurs, you record the facts, the assessment and the follow-up actions straight away. That way, you decide quickly and on solid grounds whether to notify your data protection authority, which in the Netherlands is the Autoriteit Persoonsgegevens. Our specialists help you set it up.
Organisations that rely on our privacy management software
Everything for the GDPR in one place
Processing activities, DPIAs, registers and data subject requests in one environment.
Built for privacy professionals
Dashboards and workflows that fit the work of the DPO and privacy officer.
Privacy and security connected
Link privacy controls to your ISMS, so you see both types of risk together.
How does it work, exactly?
You start straight away with a best-practice setup, including commonly used dashboards, governance, frameworks, risk management and accountability processes. We then configure the dashboard to your specific requirements and preferences.
That way, you’re well prepared for privacy audits and keep your organisation running during a data breach or other serious incident.
What you get with our privacy management software
From record of processing activities to data breach: this is how it works in practice.
Overview per process
For each department, process and application, you see where you’re GDPR compliant and where you’re not yet. That way, you know where to take action first.
Registers and DPIAs
Keep your record of processing activities, data processing agreements, DPIA screenings and DPIAs together in one environment.
Data breaches followed up
Record incidents and data breaches, follow them up through standard workflows and monitor them until they’re closed.
Record it once
Record each control once and use it to demonstrate compliance with every framework that applies to you. Export reports for senior management and auditors as PDF or to Office.
Privacy management in line with the GDPR and ISO 27701
Your privacy management fits the frameworks that apply to your sector.
Support for the core obligations: the record of processing activities (Article 30), the DPIA (Article 35) and notifying the supervisory authority and data subjects of data breaches (Articles 33 and 34).
The international standard for a Privacy Information Management System (PIMS), closely linked to ISO 27001.
The framework of NOREA, the Dutch professional association of IT auditors, for assessing whether you meet your privacy objectives. A logical starting point when you prepare for a privacy audit.
The framework developed within the Dutch government that translates privacy legislation into practical controls.
The Dutch government’s framework for information security, with controls that also cover the protection of personal data.
The Dutch standards for information security, secure data exchange and logging in healthcare.
A data breach: what do you need to do within 72 hours?
If you discover a data breach, you don’t have much time. If the breach poses a risk to the individuals involved, you report it to your data protection authority without undue delay and, where feasible, within 72 hours. In the Netherlands, that’s the Autoriteit Persoonsgegevens. If the risk is high, you also inform the individuals themselves. And you record every data breach internally, even if you don’t need to report it.
Those first hours determine how well you handle it. Who assesses the breach? Which data is affected? Who decides whether to report it? In Key Control Dashboard, you record all of this in one workflow, together with the follow-up actions. That way, your file is ready when the regulator has questions.
What our clients have to say
This is what drives us
“We had to choose: replace or keep building. By working with Yellowtail Conclusion, we were able to keep building on a platform that had proven itself in practice for years.”
“The dashboard helps us keep an overview and respond flexibly to new laws and regulations. It grows with us, and that gives us confidence.”
Frequently asked questions about privacy management software
A PMS helps you manage the processes around privacy protection and the GDPR centrally. You record processing activities involving personal data, carry out DPIAs, register data breaches and handle data subject requests. That way, you demonstrate that you comply with your privacy policy.
No, the GDPR doesn't require you to use software. You are required to show that you handle personal data with care, though. In most cases, you keep a record of processing activities, carry out a DPIA for high-risk processing and report a data breach that poses a risk to individuals to your data protection authority, where feasible within 72 hours. A PMS gives you the structure to keep track of all this and demonstrate it.
The cost depends on your requirements, the size of your organisation, your sector and the number of locations. After an initial assessment, you'll know which package and features fit your situation. Want a first impression? Request a demo.
Sound good?
Request a free, no-obligation demo and explore what’s possible. Find out what our services and solutions mean for your organisation.
