This documentation supports the 20.08 version of BMC Digital Workplace Advanced, which is available only to BMC Helix subscribers (SaaS). To view an earlier version, select the version from the Product Version menu.

Data privacy, the GDPR, and the Digital Workplace technology

The BMC Digital Workplace solution provides capabilities that help administrators address the personal data protection and privacy requirements associated with the General Data Protection Regulation (GDPR). The GDPR is a set of rules and principles governing the handling of personal data of individuals located in the European Union (EU).

Important

This BMC document provides general information about the GDPR and its key requirements. It is not intended to provide any legal advice. The GDPR can be found at https://ec.europa.eu/info/law/law-topic/data-protection_en. Under this new regulation, any organization handling personal data of European Union residents, regardless of its location, needs to understand which GDPR requirements apply to its organization and accordingly devise a plan for adjusting its systems and processes and for educating its people. Although BMC is not in the business of data privacy compliance software, some of the features of the BMC Digital Workplace solution can help customers meet some requirements of the GDPR. For more information about how BMC solutions can help achieve the requirements of the GDPR, see https://www.bmc.com/it-solutions/gdpr-compliance.html. 

Related topics

Official EC website: General Data Protection Regulation
BMC and GDPR compliance

Addressing-data-privacy-requests

The GDPR is designed to harmonize data privacy laws across Europe, to protect and empower all EU citizens’ data privacy, and to reshape the way organizations approach data privacy. 

Personal data in BMC Digital Workplace

According to the GDPR, personal data includes any information that can identify an individual directly or indirectly. For example, the following data can be considered personal data: name, phone number, email address, IP address, government ID number, and credit card numbers. The personal data comes from the user directly or from a database, or is imported from other external sources. 

For the purpose of sending different types of notifications to users, BMC Digital Workplace stores the following data:

  • User ID
  • Full name
  • Work email, personal email
  • Address, city, country, zip
  • Home location ID, home asset ID
  • Phone number

The data is stored in the databases for an unlimited time period (until the data is deleted, modified, or anonymized). The data is also stored in log files for a time period that an administrator individually configures.

Capabilities of BMC Digital Workplace for handling personal data

BMC Digital Workplace provides the Personal Data Privacy Utility for supporting applicable data protection and privacy requirements associated with the GDPR. The Personal Data Privacy Utility can be used by the data protection officer or the administrator to determine that the product is compliant with the GDPR, and to manage and resolve the data privacy inquiries that individuals request.

The Personal Data Privacy Utility works for basic configuration (BMC Digital Workplace) and advanced configuration (BMC Digital Workplace Catalog and BMC Digital Workplace).

To learn more about the Personal Data Privacy Utility, go to Addressing-data-privacy-requests.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*