What the example shows
The employee record identifies a purpose and a processor, but the retention period is unclear. The open question is linked to a document for review and an accountable person; the legal answer is not invented.
ASSESSMENT AREAS
Privacy / GDPR / ZZLP (Serbia)
The policy exists. Do you know where the data actually goes?
Connect processing activities, purposes, legal bases, processors and retention periods. Explore gaps through a practical example — from the processing record to an action plan.
Explore the exampleA practical situation
A client has supplied a policy, a service-provider agreement and an employee data spreadsheet. Use the synthetic example to examine what these documents actually establish about the processing and which questions remain open.
Illustrative example · synthetic data
From the problem to the next step
An illustrative scenario using synthetic data, not a view of a real client’s operations.
- 01Processing activity
- 02Purpose and legal basis
- 03Recipient or processor
- 04Retention period
- 05Gap and action
Example outputs
- Records of processing activities and gap overview
- Data protection impact assessment (DPIA) working material and action plan
The page language does not determine the applicable law. This example does not replace a legal assessment, and real personal data must not be entered on this website.
Illustrative example · synthetic dataDoes this problem sound familiar?
Request Pro-Demo access and tell us which area interests you. The SION team will confirm which scenario you can explore.