Resources such as groups of people or data categories are managed centrally in caralegal and are linked to all of your documentation. Group and move data types using drag & drop and easily merge them if the content matches.
Data categories, types and groups of people are the common denominator across all data protection documents. The uniformity of these central resources shows the professionalism of a data protection management system. caralegal supports you with easy handling in creating and managing these resources and saves you valuable time in daily data protection management.
With caralegal you create data types and categories centrally and simply group them using drag and drop. Changes will be reflected throughout the documentation.
Keep track of the confidentiality of your data and assign tailored data classes to your data categories.
Thoroughly planned classification enables more efficient use and protection of critical data across the organization. With caralegal you transfer your classification from information security management to data protection management.
Experience our data protection management software, equipping your data protection team with robust tools for streamlining your privacy processes. Our features are distinguished by an intuitive workflow, seamless integration, and exceptional user-friendliness.
Tailored audit questionnaires help you identify improvement measures for your data protection organisation.
Service providers are clearly managed and meaningfully linked to the record of processing activities.
Simplified documentation of high-risk processing activities through intelligent linkage with the record of processing activities and TOM.
Get started easily: use our verified templates for records of processing activities, technical and organisational measures, or service providers, or create your own.
Create your deletion concept automatically from the record of processing activities, define deletion rules and ensure compliance with your deletion deadlines.
Manage your technical and organizational measures on a processing-specific or cross-company basis.
At the push of a button, you handle requests from data protection authorities. Your documentation is centrally stored, keeping all compliance obligations in view.
Keep track of all requests from data subjects and meet obligations on time.
Contractual agreements with service providers are systematically and automatically reviewed in accordance with current legal requirements.
Turns non-legal experts into data protection champions! You receive suggestions for the legal framework based on Article 6 para. 1 GDPR.
Interactive and sustainable: Raise employee awareness to handle personal data in accordance with data protection.
Working together across language barriers: your documentation is automatically translated into 28 languages.
Export with readability in mind: Single processing activities, data protection impact assessments, or all technical and organizational measures (TOM) and service providers.
Considerably more efficient: create tasks, allocate them to coworkers, and collaborate on documents jointly via commenting.
Always stay in the loop: receive in-app or email notifications. You have the flexibility to activate or deactivate each one independently.
Manage all data protection and compliance-related documents in one central location.
For added security: Secure access for all users with multi-factor authentication. Upon your request, this becomes mandatory for all users.
Every change to your documentation is securely recorded. Older content can be accessed at any time, sorted by date.
Frequently asked questions / FAQs
What are data types in data protection management?
The term “data type” is used in data protection management as a synonym for personal data and helps to classify it. Data types are always assigned to a specific data category and these in turn to a group of people.
What are data categories in data protection management?
Data category is a term from the GDPR and generally helps to divide individual data types into categories. According to Art. 30 GDPR, the data categories being processed must be specified for each processing activity.
What are examples of data types and data categories in data protection management?
Data categories are always assigned to a specific group of people, so that the data categories “master data”, “order data”, and “contract data” could be defined for the “customer” person group. Master data includes, for example, the customer's first and last name, the customer number as well as the email address and telephone number.
What data categories does the GDPR specify?
The GDPR itself does not provide a general categorization of data. However, under Article 9 it establishes categories of data that are subject to special protection. It refers to
racial or ethnic origin
religious or ideological belief
sex life and sexual orientation
What is data classification in data protection management?
Data classification is a risk management tool and is used in data protection management to identify data that is particularly worthy of protection and to evaluate the technical organizational measures. To protect the data category “health data”, a significantly higher level of security must be achieved than for less sensitive personal data such as the customer number.
How does data protection management software help manage data types and data categories?
A data protection management software like caralegal has the advantage that data types and data categories are created centrally, thus ensuring uniform use in the entire data protection documentation. In the event that new data types are added during the creation of a processing activity, they can be assigned to a data category using drag & drop. In addition, entries with the same meaning such as “customer number” and “customer ID” can be merged with one click and the change is implemented immediately in all linked documents. Data protection management software represents a significant time saver for data protection officers and data protection coordinators, especially in companies with more than 25 processing activities.