IdS GDPR

Documented control of personal data processing

Records of Processing Activities (Article 30)

A centralized record of processing activities (RoPA): what personal data is processed, by whom, for what purposes, under which legal basis, for how long (retention), and in which systems.

Data Protection Impact Assessment (DPIA) (Article 35)

Guided DPIAs with a built-in risk matrix and prebuilt questions, so risks are assessed consistently and documented.

Processor Register & Data Processing Agreements (DPAs)

Maintain a register of processors and sub-processors and document agreement status. Track ownership and risk when personal data is processed by third parties.

Interactive Reports & Dashboards

Dashboards and reports with charts, filtering, grouping, pivoting, and drill-down. Export-ready documentation and audit support.

Review and Approval Workflow

For processing activities that require approval: notifications, attestations, and recurring sign-offs, including management approval where required.

Automated Risk Identification and Gap Analysis

Flags gaps such as missing DPIA screening, special category data, international transfers, unclear purpose or retention, and more. Provides better visibility into privacy risk.

Screenshots from IdS GDPR

Interactive reports, workflows, and structure that make privacy work audit-ready.

Target Groups & Use Cases

Who is the IdS GDPR module for? It's particularly relevant for:

Data Protection Officers (DPOs) / Privacy Officers: Need a complete overview and defensible documentation of all personal data processing.
Compliance / Legal: Need reports, evidence, and audit trails to demonstrate GDPR compliance.
Risk Management and GRC: Focus on identifying and reducing privacy risk and maintaining effective internal controls.
IT and Security Leadership: Need secure data handling and visibility into privacy across systems and vendors.
Executive Management: Need clear dashboards and progress over time for the organization's privacy program.

Typical use cases:

Create and update records of processing activities when launching new services, systems, or making other changes to personal data processing.
Conduct DPIAs when required - for example, for special category data or other high-risk processing.
Ensure processors are documented and have valid agreements, including ongoing sub-processor oversight.

Benefits

Faster documentation and audit readiness
Improved data quality
Increased transparency and control
Reduced risk
Increased trust with regulators and customers

Regulatory Compliance

GDPR (especially Articles 28, 30, and 35)
National data protection legislation
Supervisory authority expectations and audit requirements

WEBINARS & RECORDINGS

Watch our on-demand webinars

Concrete demos and deep dives from IdentityStream — on your schedule.

On-demand

September 30, 2026

IdS GDPR — documented control over personal data

See how the processing register adapts to choices made along the way, when legitimate interest balancing, compatibility testing and a DPIA are required, and how the supplier register and GRC Standard Bank support privacy work.

Watch recording

On-demand

August 26, 2026

New version of IdS ServiceManager launched

Shareable and syncable custom views, consolidated “last logged in” across AD and Entra ID, MFA on approval, AD as a pure connector with agent, improved access reviews and inactive-user notifications.

Watch recording

On-demand

March 23, 2026