×
 
 
  •  
$helper.renderConfluenceMacro('{bmc-global-announcement:$space.key}')

Phased rollout

 

This version of the software is currently available only to early adopter SaaS customers as the first step in our phased rollout.
BMC Helix Digital Workplace Advanced 21.02 ... Planning Security planning

Data privacy, the GDPR, and the Digital Workplace technology

The BMC Digital Workplace  solution provides capabilities that help administrators address the personal data protection and privacy requirements associated with the General Data Protection Regulation (GDPR). The GDPR is a set of rules and principles governing the handling of personal data of individuals located in the European Union (EU).

Important

This BMC document provides general information about the GDPR and its key requirements. It is not intended to provide any legal advice. The GDPR can be found at https://ec.europa.eu/info/law/law-topic/data-protection_en. Under this new regulation, any organization handling personal data of European Union residents, regardless of its location, needs to understand which GDPR requirements apply to its organization and accordingly devise a plan for adjusting its systems and processes and for educating its people. Although BMC is not in the business of data privacy compliance software, some of the features of the  BMC Digital Workplace solution can help customers meet some requirements of the GDPR. For more information about how BMC solutions can help achieve the requirements of the GDPR, see https://www.bmc.com/it-solutions/gdpr-compliance.html. 
Related topics

Official EC website: General Data Protection Regulation Open link

BMC and GDPR compliance Open link

Addressing data privacy requests

The GDPR is designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens’ data privacy, and to reshape the way organizations approach data privacy. 

Personal data in  BMC Digital Workplace

According to the GDPR, personal data includes any information that can identify an individual directly or indirectly. For example, the following data can be considered personal data: name, phone number, email address, IP address, government ID number, and credit card numbers. The personal data comes from the user directly or from a database, or is imported from other external sources. 

For the purpose of sending different types of notifications to users,  BMC Digital Workplace  stores the following data:

  • User ID
  • Full name
  • Work email, personal email
  • Address, city, country, zip
  • Home location ID, home asset ID
  • Phone number

The data is stored in the databases for an unlimited time period (until the data is deleted, modified, or anonymized). The data is also stored in log files for a time period that an administrator individually configures.

Capabilities of  BMC Digital Workplace for handling personal data

BMC Digital Workplace  provides the Personal Data Privacy Utility for supporting applicable data protection and privacy requirements associated with the GDPR. The Personal Data Privacy Utility can be used by the data protection officer or the administrator to determine that the product is compliant with the GDPR, and to manage and resolve the data privacy inquiries that individuals request.

The Personal Data Privacy Utility works for basic configuration ( BMC Digital Workplace ) and advanced configuration ( BMC Digital Workplace Catalog  and  BMC Digital Workplace ).

To learn more about the Personal Data Privacy Utility, go to Addressing data privacy requests.

Was this page helpful? Yes No Submitting... Thank you
Last modified by Olha Horbachuk on Oct 05, 2020
concept planning

Comments

Log in or register to comment.

Roles and permissions
Supported languages and locales
© Copyright 2013 - 2021 BMC Software, Inc.
Legal notices

Powered by Atlassian Confluence and Scroll Viewport

© Copyright 2005-2023 BMC Software, Inc. Use of this site signifies your acceptance of BMC’s Terms of Use . BMC, the BMC logo, and other BMC marks are assets of BMC Software, Inc. These trademarks are registered and may be registered in the U.S. and in other countries.