Non-technical talk for managers and Data Protection Officers about how the reasons behind the automation of creating a global data mapping for GDPR (at least), the challenges and possible methodologies using a new concept of Process Mining based on Data Activities

1. 1© 2019 - Kensu Inc.w w w. k e n s u . i o
Andy Petrella
CEO @ Kensu
https://kensu.io
How to Build A Global Data Mapping

2. 2© 2019 - Kensu Inc.w w w. k e n s u . i o
How I got here…
Ms. Mathematics
Specialization in Graph Theory
Ms. Computer Science
Specialization in Semantics
Study
1999-2005
Big Data
Open Source: Spark Notebook
Speaker at world class events
Data Science
2012-2014
Enterprise Ready Data Science Platform
Cutting-edge distributed and AI systems
Pivot on Internal Data Activity Tool (Adalog)
Spark Notebook Enterprise
2015-2017
Data Mapping
GDPR
And beyond
LDPD
Today
Data Analysis
Catalog
Large scale processing
International projects
Geospatial
2006-2011
Governance-Compliance-
Performance
New Category
GDPR
Customers across EU
Kensu Data Activity Manager
2018-2019

3. 3© 2019 - Kensu Inc.w w w. k e n s u . i o
DATA & ACTIVITY
GOVERNANCE.
COMPLIANCE.
PERFORMANCE.

4. 4© 2019 - Kensu Inc.w w w. k e n s u . i o
Agenda
What is it? And… Why
Data Mapping & GDPR01
Reconquer your IT. Enforce governance.
Data Activity for GDPR02
Business process tracker, automation of maintenance and AI-powered
Data Activity to Data Mapping03
Thinking outside of the box.
Turn GDPR activity into value04

5. 5© 2019 - Kensu Inc.w w w. k e n s u . i o
Data Mapping
& GDPR
• Collected (from sensor, human, …)
• A result of a series of
transformations (processing, AI, …)
All data are either
one of
• Where the data was collected from
• How the data has been transformed
A Data Mapping
explains
• All information about internal or
external usage of data
• A series of Data Mappings
GDPR requires
accountability at the
Business Processes
level, which is
• Sort of, limits to personal data onlyGDPR

6. 6© 2019 - Kensu Inc.w w w. k e n s u . i o
(interlude)
Reasons of
GDPR (my2¢)
Awareness of the value
of the data
Accessibility of
• Big Data & Real Time
• Cloud
• Data Science
Global understanding
of Data Science and AI
impacts
Worries about social
networks global effects
Strategical investments
in AI
Data Science
considered as “Wild
West”

7. 7© 2019 - Kensu Inc.w w w. k e n s u . i o
Data Mapping
Challenges
Mismatch
Strategy: use more data, creativity
with data, faster on the market
Compliance: pre-analysis, periodical
checks, manual reporting
All fine, but almost contradictory with
reasons behind GDPR (?)
Top-Down
Manual Periodical Audit / Handmade
Documentation
Post-processing to extract GDPR
reports

8. 8© 2019 - Kensu Inc.w w w. k e n s u . i o
Data Activity
Data Activity is the new pillar of Data Governance
With Data Activity the scope of Data Governance includes:
• Collection origins (Provenance)
• Data Transformation Tools behaviors
Data Activity is the metadata mandatory to govern Business
Processes
• They are Generated by the Tools and the IT Systems
• It’s a New Concept in Data
• They are Technology Agnostic

9. 9© 2019 - Kensu Inc.w w w. k e n s u . i o
Data Activity & GDPR
• Continually creates and updates Art. 30, Process Registry
• Tracks Consents usage and demonstrate accountability
• Simplifies the handling or avoid Data Subjects Rights issues
• Automatically discovers DPIAs needs and requirements
• Reports activities and impact of Data Breach
• And even, tracks the quality of Profiling & Decision making (WP 29)

10. 10© 2019 - Kensu Inc.w w w. k e n s u . i o
Data Activity
& Data
Mapping However, Data Activities require a
dedicated system to convert their
constant flow into Compliance assets.
Kensu Data Activity Manager
Data Activity is the technical measure ,
the implementation tactic to create and
maintain the global Data Map

11. 11© 2019 - Kensu Inc.w w w. k e n s u . i o
Data Activity: Implementation Strategy
Remember that
1. Data Activities are published by the Tools themselves
2. Tools include legacy and new systems.
Here is one approach to create and use the global Data Map at your advantage:
1. Choose a few Business Processes (e.g. Create invoice, create marketing campaign)
2. Instrument the tools along the chain of value to send all their activities
3. Start governing the chosen Business Processes
4. Let the system discover all other Business Processes to be governed

12. 12© 2019 - Kensu Inc.w w w. k e n s u . i o
Values
Data Activity & Data Mapping

13. 13© 2019 - Kensu Inc.w w w. k e n s u . i o
GDPR:
From Manual
to Automated
Art. 30, Process Registry
Consent Management
Data Subjects Rights Management
Art. 35, DPIA
Breaches Management
Art. 29, Data Science and Quality Management

14. 14© 2019 - Kensu Inc.w w w. k e n s u . i o
Data Strategy
Data Activity & Data Mapping

15. 15© 2019 - Kensu Inc.w w w. k e n s u . i o
Validated
Governance
Data Migration Control
Govern Hybrid Infrastructures
Data Marketplace
Segregated Governance across Units
Efficient Data Change Management
Control Data Activity / Science KPIs

16. 16© 2019 - Kensu Inc.w w w. k e n s u . i o
Thanks!
Q/A
Check out: http://kensu.io
Come visit us at our Kensu booth