Articles 15, 17, 20 and 32
Show how you handle identity data and who has access to it.
RapidValue helps you show that access controls work, import only the attributes you need and handle data-subject requests. The audit records that the law requires you to keep stay in place.
- Control
- Observation
- Evidence
- Gap
The controls
The evidence for each control
For each control you see what the policy requires and which evidence an auditor can inspect.
1
Art. 32 · security of processing
Access reviews, least-privilege controls, conflicting-access findings and decision evidence that cannot be changed.
2
Art. 15 & 20 · access and portability
A full export produces a machine-readable copy of identity, configuration and audit data.
3
Art. 17 · erasure
Personal data can be pseudonymised. Audit events that the law requires you to keep are retained.
The evidence, in the product
Watch the evidence being produced
Who had access on a given date, and a signed evidence pack the auditor can verify.
What this does not cover
RapidValue supports your controls and evidence. It does not replace legal advice or create GDPR compliance by itself.