cmacc gdpr server en - 20170606

CMACC SERVER – A CONTRACT SERVER FOR GDPR

Cmacc Transact  MarcDangeard◦ Engineering(Supaéro)andBusiness(HEC)background◦ Entrepreneur(25yearsinSiliconValley)◦ Oracle,Sony,manystartups

 CmaccTransact◦ Createdin2016todoaPOCwithCaissedesDépôts◦ Cmacclanguage/server,basedonCommonAccord

CMACCSERVER-MAY2017 2

Personal data from the very first interacCon


Whathappensnext?Whatdataiscollected?How?Whereisitstored?

Howlongisitkept?Whohasaccess?

PaulvisitsMyCorpwebsite PaulagreetoTermsofUse(withoutreading)

Data in the enterprise: many silos


?Manysilos,coordinatedaroundlinearprocesses

Noeasydataprivacymanagement

DPO

LouispreparesaTermsofUsedocument

Bernarduploadsthedocumentonthewebsite

Jeannesendsmarke\ngemails

Marieshipsproducts Pierrecollectspayments

MSWorddocumentinafolder

Cookies Emailcampaigns+CRM ERP+Shippingso^ware FinancialsystemLEGAL IT MARKETING BACKOFFICE COMPTA

GDPR – May 25th, 2018 Informedconsent

Accesstodata,righttobeforgoaenPortability

◦  Structuredformat,datatransferreddirectlyfromoneprocessortotheotherifpossible

◦  Tomakeiteasytoswitchserviceproviders

Privacybydesign/bydefaultCulture,process,butalsotoolsto:

◦  Informusersoftheirrights

◦  Managetheserights(access,changes,righttobeforgoaen)

◦  Renewconsentsasneeded


What is GDPR was an opportunity to re-focus the enterprise around data?


What if the DPO could manage all enterprise data with a simple tool?


Contract server


VSCodeplugin

Opensourceproseobjects

AIcapture

Databinding

Proseobjects

Contractserver

Webpagegenera\on

•  APIforcustomUI•  APIforContractLifecyclemanagement

•  APIforSmartContracts

PDFgenera\onPrivateproseobjects

Benefits (GDPR)  ManageTermsofUsetemplates

 Mul\-juridic\ons

 Mul\-lingual

 ManageUserInforma\onno\ces

 ManageallcontractsthatareimpactedbyGDPR(BCR,sub-contractors,etc.)

 Managerelatedvisualinterfaces


An improved user experience


PaulvisitsMyCorpwebsite Hegivesaninformedconsent,thankstothevisualcluesprovided

ontopoftheconsentform

Paulobject

MyCorpobject

TermsofUse

source:DisconnectPrivacyIconsserverviaLegaltechdesign.com

CMACCSERVER-MAY201711

DPOLEGAL

Paulobject

MyCorpobject

TermsofUseobject

Usersobjectsdatabase

DataStore

Managementofconsentsandothercontracts

Groupobjects

Partnersobjects

Salescontractobject

ProseObjectsdatabase

An architecture for GDPR

A “data store” to manage all data


Consentsarecapturedfromthewebsiteanddue

processcanbedocumented

Manageeasilyupdatesresul\ngfromchangesininternalpolicy

orchangesinthelaw

Userscaneasilychangetheirchoices,updatetheirconsentorthe

relateddata)

Salescontractswithpaymentandshipping

informa\on

Deliveryreceipts,no\cesofclaim,

etc…

Invoices,Statements

Asystemtomanagealldata,includingUIfortheuserstoaccesstheirdata,andfortheDPOtohave

aviewofhowdataiscollectedandmanaged

LouispreparesaTermsofUsedocument

Bernarduploadsthedocumentonthewebsite

Jeannesendsmarke\ngemails

Marieshipsproducts Pierrecollectspayments

Cmaccproseobjects Cookies Emailmarke\ng+CRM ERP+Shippingso^ware FinancialsystemLEGAL IT MARKETING BACKOFFICE COMPTA

1 2 3 4 5 6

DPOContractsserver+DataStore

From compliance to business opportunity


Asystemtomanagedataprivacy,including:•  Manageusersrela\onships

•  Build tools to collected an informed consent, withvisualcluesandabilitytomanagedataprivacyrights

•  Buildtoolstocollectconsentforminors

•  ManageallcontractsimpactedbyGDPR

•  Adatastoreastheonesourceoftruthforuserdatawithintheenterprise

•  ThisdatastoreusedinternallycanbeopenedwithanAPItobecomeadatastoreforendusers

•  API and autoriza\on management so that the next\meauserwantstopurchasefromAmazon.com,shecan provide a link to the data store rather thanhavingtoprovidepersonalinforma\ondirectly.

COMPLIANCE OPPORTUNITY

Cmacc server – a contract server for GDPR

 ManageTermsofUsetemplates

 ManageUserInforma\onno\ces

 ManageallcontractsthatareimpactedbyGDPR

 Managerelatedvisualinterfaces

Cmacc Transact � HEC Paris � Supaéro

[email protected]+33(7)68112325

Databinding

Proseobjects

Contractserver


cmacc gdpr server en - 20170606

Technology