open datenschutzcenter

Open data protection center 2.0

Open Source Data Protection Management System

The Open Data Protection Center (ODC) is an open source data protection management system for companies and data protection officers. The ODC is continuously developed with an active community of companies, data protection officers and information security officers. Open Source means that the source code of the software is open to the public. Companies can operate the ODC on their own server, develop their own functions and expand functionality. H2 Invent GmbH is the company behind the open data protection center and manages the repository, the wiki and the releases. H2 Invent develops new ODC functions for companies to adapt it to the company's requirements.

Translations

Help to make even better with the Open data protection center. We are always looking for new translations in all languages. Translations are organized via crowdin and can be translated there easily and easily. https://crowdin.com/project/open-datenschutz-Center

Functions

The following functions are already integrated in the open data protection center:

• Data protection academy for internal data protection training for the proof of continuous data protection further training for employees.
• Internal data protection audit with an extensive questionnaire, justifications and information for the implementation
• Department of a global Tom from the audits.
• Creation of technical and organizational measures for processing.
• Addification of processing and creation of a processing list with revisions.
• Sorting the processing according to departments and products.
• Recording of contacts to contractors and clients.
• Entry of data forwarding and order processing.
• Linking of data forwarding, order processing with processing and technical and organizational measures.
• Recording of data protection incidents with documentation of consequences, measures and effects.
• Creation of IT guidelines with a link to processing
• Uploading forms and links to products and departments
• Creation of a network plan for displaying dependencies between processing, data expansion and order processing
• Creation of reports as PDF and Excel.
• Master data with departments, protection goals, products and user administration.
• Import of audit questions and processing activities as .odif files.
• To hold and assign to dos and tasks.
• Documenting software and configurations that affect data protection.

The dashboard

The dashboard represents all important figures on data protection in the company. In the head area, all important numbers and tasks are presented. Each button intuitively leads the user to the respective area or document.

The data flow plan

All data on the open data protection center are dynamically shown in the central data fluid plan on the dashboard. The links of the documents already created are shown in the data flow plan. This enables the user to quickly see critical processing or data expenditure and start possible improvements.

Forms

All documents can be recorded using forms. The data is stored in a structured and later filterable database.

navigation

Navigation can be accessed quickly to every area. Additional functions are available as the client's administrator.

Quick start

To make it easier for you to get started, we provide a docker image and a docker compose file. With these tools you can quickly install and test the current stable version of the ODC.

For detailed instructions, please visit our wiki.

The Docker compose file provided installs the ODC in production mode and via http. Please note: No TLS certificates are set up. This installation should therefore be operated exclusively internally or behind a reverse proxy with TLS termination.

In addition to the ODC container, a Traefik Load Balancer, a MySQL database and a Keycloak server are set up. All applications can also be operated in environments such as swarm or helmet without the Docker Compose file.

Migration

From 1.12.x to 2.x

• After a conversion of the default team, a migration of the database must be made. For migration, the command must be carried out once via the CLI. After that, all audit destinations are converted from Default Team 1 to zero.

 php bin/console app:migrate:defaultTeam

cooperation

In cooperation with the professorship "Data Protection and Compliance" of the research institute Cyber ​​Defense (Code) of the University of the Bundeswehr Munich,:

• As part of Mr. Juister's master thesis, the open data protection center supplemented the function of documenting extinguishing concepts.
• The Open Data Protection Center as part of Ms. Wesenberg's bachelor thesis supplemented the "Conception and Integration of Data Protection Concept in the Open Data Protection Center"

The VVT ​​assistant and inheritance were implanted by the @Verdigado employees.

License

The current version of Open Data Protection Center is provided under the AGPL-3.0 License. For more information, see the License File in this repo. Copyright (c) 2020 H2 Invent