Privacy events

Privacy events are a core concept in GDPR compliance management and in protecting data subjects’ rights. The term “privacy events” includes all actions and interactions related to the processing of data subjects’ personal information, going beyond just consents.

Some examples:

• Status of each purpose: Regardless of the legal basis, Trust Guardian tracks the status of all processing purposes, not limited to consent but also covering all six legal bases, including Legitimate Interest and Contractual Obligations.
• Consent history: A timeline for each data subject, including the history of their consents and other purposes, with all actions that granted or revoked consent over time.
• Updates to “processing authorizations”: Any changes made to the authorizations granted by the data subject for purposes not based on consent.
• Acknowledging of privacy notice: Recording the moment a data subject acknowledges a privacy notice, linked to the historical version of the notice at that time.
• Acknowledging of other legal documents: Such as terms and conditions of sale, contracts, etc.
• Exercise of data subject rights: When a data subject exercises one of their rights under the GDPR via myPrivacy, such as the right to access, rectify, erase, restrict processing, object, or data portability.

Privacy events represent the complete journey that personal data follows within the organization and are essential for ensuring transparency and traceability of processing activities. Accurately documenting and tracking these events helps companies demonstrate GDPR compliance and ensures that each data processing activity is legitimate, justified, and recorded in Trust Guardian.

Trust Guardian’s approach to privacy events
Trust Guardian collects and consolidates all privacy events in a centralized register, providing a comprehensive and immediate view of each data subject’s privacy status. Through centralizing and recording privacy events, Trust Guardian ensures that every action taken on personal data is documented precisely and transparently, improving the company’s ability to demonstrate GDPR compliance and accountability. Documenting each privacy event is crucial for handling inspections by supervisory authorities and responding to data subjects’ requests promptly and accurately.