Privacy Management
RoPA, DPIA, DSAR and consent — operationalised.
Operate privacy as a discipline, not paperwork. Maintain Records of Processing (RoPA), run DPIAs, fulfil DSARs end-to-end, and enforce consent at runtime via Link's Consent Enforcer.
What Privacy does
RoPA register linked to data catalogue and processing systems
DPIA workflow with risk thresholds and mitigations
DSAR intake → discovery → redact → deliver, with SLA timers
Consent & preference centre integrated with Connect
Privacy incident management with regulator-clock countdown
Lineage and residency proofs via Link's Lineage Tracker
The Privacy state machine
Privacy enforces a controlled state machine — every transition is evidenced and audit-traceable.
Inventory
Discover processing activities and data flows.
Assess
DPIA for high-risk activities; mitigations captured.
Operate
Run DSAR, consent and breach workflows.
Enforce
Push consent and residency rules to Link runtime.
Prove
Produce regulator-ready evidence on demand.
Evidence in, outputs out
Privacy reads live signals from the operating estate and emits regulator-ready outputs — no shared drives, no spreadsheets.
Evidence sources (in)
- Connect Consent & Preference Centre captures
- Link Data Discovery, PII Redactor and Lineage Tracker
- One HR/payroll subject data sources
Outputs (out)
- Regulator submission packs (GDPR, PDPL, NPHIES)
- DSAR completion register with proof of fulfilment
- Cross-border transfer impact assessments
Crosswalked to what regulators ask for
Used in these business solutions
Privacy Management is composed into outcome-led iShield solutions.
Run Privacy on iShieldGRC.
Stop running privacy in spreadsheets and email threads. See it on a live evidence ledger.