GDPR Object Collection

The GDPR Object Collection task collects personal user information for each business functionality (referred to as object) across the IRC application.

To collect personal data:

  1. Click the New icon on the Personal Data Protection page.
  2. Specify a task name to identify the task.
  3. Select GDPR Object Collection from the Task type drop-down list.
  4. Specify the Object ID whose personal information must be collected.
  5. Select one of these options to schedule the object collection task:
    • Run Now: Select this option to run the task immediately.
    • Run Later: Select this option to schedule a date and time for the task.
      1. Specify the start date to schedule the object collection task. Enter a date manually or click the Calendar icon to select a date from the calendar.
      2. Specify the start time. Enter time manually or click the Clock icon to specify time. The object collection task will start at the specified time.

        If you enter an invalid date or time, the system displays a warning message.

        The date and time selected on this page is according to the time zone defined on the Preferences page

  6. Click Save. The task status is reflected on the Task page when the task executes and on the Personal Data Protection home page after the task completes.
    The priority of the object collection task is medium by default. The object collection task runs in concurrence with all the long running tasks.
    Note: The DPO must schedule the object collection task when the system is not undergoing any change. Else, the object collection results will not be accurate.

    Object Collection tasks can be stopped from the Manage > Tasks page only.

  7. Click the Download icon in the Action column once the task status is updated to Completed. The downloaded .json file displays these personal information for every selected object.
    • Object Details: Generic details of the user
    • Ownership Details: Details of the ownership the user has on the objects across the IRC application
    • Business object: The name of the IRC business object
    • Object type: The type of the object. For example, Rule book.
      Note: For Process Insights, the object type is Exception.
    • ObjectOwnership: The ownership the user has with the object. For example, Rule Book Owner.
    • Activity: The activity performed by the user with respect to the object.
    • Comments: User comments for the objects, if applicable for Requests or Violations.
    • AdditionalInformation: Any information pertaining to the user and not covered earlier. For example, the stage information for Requests.
    Note: For the Process Insights, the Object Collection task does not capture information for:
    • Exceptions in the Unassigned state
    • Previous actions taken on exceptions. Only the latest actions are considered.
    • Actions taken on exceptions at L3 level or higher.