GDPR: controles y responsabilidades
Conozca obligaciones, controles técnicos y responsabilidades organizativas.
GDPR: controles y responsabilidades · En vigor
Esta página explica controles AI-FW sin reemplazar las responsabilidades de cumplimiento o auditoría.
Dónde encaja AI-FW
- Nota: AI-FW can inspect content, mask configured patterns, control destinations and record metadata decisions. It is a technical measure, not a substitute for controller or processor duties.
Lo que el producto no hace
- Nota: Determining purposes or lawful basis.
- Nota: Performing a DPIA or deciding prior consultation.
- Nota: Handling data-subject requests or breach notifications.
- Nota: Signing processing agreements or deciding transfer legality.
- Nota: Guaranteeing classification in every system.
Controles relacionados
- Nota: Minimisation: Nota: Process only necessary personal data. AI-FW: Nota: Detect and mask configured categories before provider egress.
- Nota: Confidentiality: Nota: Apply appropriate protection measures. AI-FW: Nota: Authentication, identity policies and content inspection.
- Nota: Accountability: Nota: Demonstrate measures and decisions. AI-FW: Nota: Exportable transaction and configuration metadata.
- Nota: Processors: Nota: Know providers and data flows. AI-FW: Nota: Model Inventory lists approved providers and endpoints.
Evidencias
- Nota: Inspection rules: Nota: Categories and configured actions.
- Nota: Request attribution: Nota: Identity, model, destination and decision.
- Nota: Logging: Nota: Mode and retention settings.
Responsabilidades de la organización
- Nota: Define roles, purposes and lawful bases.
- Nota: Maintain processing records, DPIAs and rights processes.
- Nota: Assess subprocessors and transfers.
- Nota: Manage incidents and notifications.
- Nota: Set classification and retention policies.
Preguntas frecuentes
Nota: Does masking automatically detect all personal data?
Nota: No. Review configured categories and rules; detection is not legal analysis.
Nota: Does AI-FW store prompts for GDPR audits?
Nota: Logging can use metadata and truncated previews; review Settings -> Logging.
Nota: Does AI-FW decide whether transfers are lawful?
Nota: No. The organisation assesses transfer mechanisms and obligations.
Información general, no es asesoramiento legal ni de auditoría.