This document outlines the process of creating and utilizing redaction templates within your Data Subject Request (DSR) workflows. Redaction templates allow you to automatically redact sensitive data for specific fields, ensuring privacy by design for all incoming requests.
Workflow: Creating a Redaction Template
To create a redaction template, follow these steps:
- Form a Workflow and Run a Test on a Step:
- Navigate to your desired workflow. In the provided screenshot, this is accessed via "Home > Settings > Workflows > Workflow".
- Add or select an Access step within your workflow.
- Configure the request method (e.g., GET) and any custom headers or body parameters as needed for your data fetch.
- Scroll down to the "Step Testing" section.
- Click "Run Test" to execute the data fetch.
- Perform Redactions on Returned Data:
- After running the test, a "Test Results" window will appear, displaying the data returned from your internal systems.
- In this "Results" tab, you will see a list of data fields (e.g., registered, phone, cell, id, name, value, picture, large, medium, thumbnail, nat).
- To redact a field, check the corresponding checkbox next to it. For example, in the image below id, name, value, and nat are shown as redacted.
- Once you have selected the fields for redaction, click "Create Template".
- Create and Edit Redaction Templates:
- After clicking "Create Template", the Step Template will be saved.
- When you click the “Template” button from the Workflow Step, this window displays the JSON Data structure and indicates which fields will be redacted. Important: For privacy by design principles, you will not see the actual data from the test in this template view. You will, however, see the field names and their hierarchical structure.
- You can edit the template by checking or unchecking the boxes next to the keys to include or exclude them from redaction.
- Click "Update Template" to save your changes to the redaction template.
- After clicking "Create Template", the Step Template will be saved.
How Redaction Templates Work
Once a redaction template is configured for a workflow step:
- Automatic Redaction: Any time a new DSR comes in through this workflow, the system will automatically follow the defined redaction template. Any data for the fields marked as "Redacted" in the template will be redacted on request by default.
- Layered Redaction: You have the flexibility to make additional redactions on a specific DSR on top of the redactions configured in the template. This allows for granular control over sensitive data on a case-by-case basis.