Impact of the GDPR tasks on the GRC events

User data


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
The selected users data on the Monitor > Data > User	User data is retained and is available on the GDPR Excluded Objects tab.	User Data remains in the anonymized form.	User Data is deleted from the application.

Violations with the Under Review or Open status


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
If the selected user is a violating object.	Violation is 'Auto-Closed' with appropriate comment.	Violation is 'Auto-Closed' with appropriate comment.	Violation record is deleted.
If the violations are assigned to the selected user(Assignee).	Violations are reverted to the Open and Unassigned status.	Violations are reverted to the Open and Unassigned status.	Violations are reverted to the Open and Unassigned status.
If the selected user is assigned a violation for discussion.	Violations are reverted to the Open and Unassigned status.	Violations are reverted to the Open and Unassigned status.	Violations are reverted to Open and Unassigned status.
If the selected user has provided comments for a violation.	Comments will continue to be displayed.	User is anonymized. However, the comments are retained.	User is anonymized. However, the comments are retained.

Violations with the Mitigated or the Closed status


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
If the selected user is the violating object	Not applicable	Violated object is anonymized.	The violations are deleted.
If the selected user has assigned violations (Assignor).		User is anonymized.	User is anonymized.
If the violations are assigned to the selected user(Assignee).		User is anonymized.	User is anonymized.
If the selected user is assigned a violation for discussion.		User is anonymized.	User is anonymized.
If the selected user has provided comments on a violation.		User is anonymized. However, the comments are retained.	User is anonymized. However, the comments are retained.

Rule books, Rules, Conditions library


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
The selected user is assigned the role of an Owner.	Ownership is assigned to the Bootstrap user.	Ownership is assigned to the Bootstrap user.	Ownership is assigned to the Bootstrap user.
The selected user is assigned the role of a User.	User action is retained. However, the user cannot be assigned the Users role after the Infor GRC stop monitoring task is executed.	User anonymized.	User Data is deleted.
The selected user is not the owner of the rule. However, the rule is last updated by the selected user.	No actions	User data is anonymized.	User data is anonymized.

Compensating Control


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
If the selected user is the creator of the compensating control.	No actions	User data is anonymized.	User data is anonymized.

Data Source


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
The selected user is assigned the role of an Owner of a Data source.	The ownership is assigned to the Bootstrap user.	The ownership is assigned to the Bootstrap user.	The ownership is assigned to the Bootstrap user.
The selected user is assigned the role of a User of a Data source.	No actions	User is anonymized.	User data is deleted.
The selected user is the Functional Area Leaf Node Approver.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.

What-Ifs


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
The selected user is an Assignee (object).	What-ifs are cancelled and moved to History page with the Cancelled status. Requests are not generated. User data is retained.	What-ifs are cancelled and moved to History page with the Cancelled status. Requests are not generated. User data is anonymized.	What-ifs are cancelled and moved to History page with the Cancelled status. Requests are not generated. User data is anonymized.
The selected user is an Assignor (Provision creator).	Provisions are cancelled & moved to History page with the Cancelled status. Requests are not generated. User data is retained.	Provisions are cancelled & moved to History page with the Cancelled status. Requests are not generated. User data is anonymized.	Provisions are cancelled & moved to History page with the Cancelled status. Requests are not generated. User data is anonymized.

Provisions with the In-process status


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
The selected user is an Assignee (Object).	Provision is cancelled.	Provision is cancelled. The user data is anonymized.	Provision is cancelled. The user data is anonymized.
The selected user is an Assignor (Provision Creator) and the Provision is at the requester's stage.	Provision is cancelled.	Provision is cancelled. The user data is anonymized.	Provision is cancelled. The user data is anonymized.
The selected user is an Assignor (Provision Creator) and the Provision is at the approval stages.	User is replaced with Bootstrap user.	User is replaced Bootstrap user.	User is replaced with Bootstrap user.
The selected user is either an approver, process completion sign off approver, Default Approver, Escalation approver, or Reviewer.	User is replaced with Bootstrap user.	User is replaced Bootstrap user.	User is replaced with Bootstrap user.

Provisions - Completed


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
The selected user is an Assignee (Object).	No actions	User data is anonymized.	User data is anonymized.
The selected user is an Assignor (Provision Creator).	No actions	User data is anonymized. However, the comments are retained.	User data is anonymized. However, the comments are retained.
The selected user is either an approver or a process completion sign off approver	No actions	User is anonymized. However, the comments are retained.	User data is anonymized. However, the comments are retained.

Certification Manager Reviews - In flight status


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
Review - The selected user is a review object.	Reviews of the user are deleted.	Review object is anonymized.	Reviews of the user are deleted.
The selected user is a Process Owner.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.
The selected user is a Reviewer.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.
The selected user is a Sign-off reviewer.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.
The selected user is a Review Manager.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.

Out of Office


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
The selected user is an alternate approver.	User is replaced with Bootstrap user	User is replaced with Bootstrap user.	User is replaced with Bootstrap user.

Report subscription


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
If the user has created or modified report subscriptions.	Assigned to Bootstrap user.	Assigned to Bootstrap user.	Assigned to Bootstrap user.

Tasks: If the selected user has created, modified, or submitted any of these functionalities:


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
Rule analysis	No actions	User data is anonymized.	User data is anonymized.
Duplicate Rule books	No actions	User data is anonymized.	User data is anonymized.
Copy Rules to Rule books	No actions	User data is anonymized.	User data is anonymized.
Import Rule Books	No actions	User data is anonymized.	User data is anonymized.
Export Rule Books	No actions	User data is anonymized.	User data is anonymized.
Generic bulk exclusion	No actions	User data is anonymized.	User data is anonymized.
What-if analysis		User data is anonymized.	User data is anonymized.
Import Compensating Controls.	No actions	User data is anonymized.	User data is anonymized.
Export Compensating Controls.	No actions	User data is anonymized.	User data is anonymized.
Violation data download	No actions	User data is anonymized.	User data is anonymized.
GDPR data anonymisation	No actions	User data is anonymized.	User data is anonymized.
GDPR data collection	No actions	User data is anonymized.	User data is anonymized.
GDPR data deletion	No actions	User data is anonymized.	User data is anonymized.
GDPR stop monitoring	No actions	User data is anonymized.	User data is anonymized.
Delete Application Instance	No actions	User data is anonymized.	User data is anonymized.
Master Process Execution	No actions	User data is anonymized.	User data is anonymized.
Process Execution	No actions	User data is anonymized.	User data is anonymized.
Delete Rule book	No actions	User data is anonymized.	User data is anonymized.
Delete Data Source	No actions	User data is anonymized.	User data is anonymized.
Delete Certification Process	No actions	User data is anonymized.	User data is anonymized.
Delete Rules	No actions	User data is anonymized.	User data is anonymized.
Delete Conditions	No actions	User data is anonymized.	User data is anonymized.

Downloads


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
The selected user has exported a task	No actions	User data is anonymized.	User data is anonymized.

If the user has created or submitted any of these functionalities:


Infor GRC Events/Data	GDPR Stop Object Monitoring	GDPR Object Anonymization	GDPR Object Deletion
The selected user has created a personal data protection task.	No actions	User data is anonymized.	User data is anonymized.
The selected user has created a schedule.	No actions	User data is anonymized	User data is anonymized
The selected user has submitted a What-if.	No actions	User data is anonymized	User data is anonymized
The selected user has submitted a Provision.	No actions	User data is anonymized	User data is anonymized
The selected user has created Infor GRC Roles.	No actions	User is anonymized	User is anonymized
The selected user has created an Application Instance.	No actions	User is anonymized	User is anonymized
The selected user has created an Data Source.	No actions	Assigned to Bootstrap user	Assigned to Bootstrap user