Privacy impact assessment with mitigation revision

Assess a proposed data use, its necessity and controls, then revise mitigations or stop the proposal if it cannot meet approved requirements. Editable collaboration with role lanes, decisions and a correction and resubmission loop. Illustrative policy and timing; adapt to local requirements.
BPMN 2.0Risk & Reliability BPMN 2.0 syntax docs
Template previewBPMN 2.0
Rendering…
What this template contains

Source: 73 lines
Make it your own.

<?xml version="1.0" encoding="UTF-8"?>
<bpmn:definitions xmlns:bpmn="http://www.omg.org/spec/BPMN/20100524/MODEL" xmlns:bpmndi="http://www.omg.org/spec/BPMN/20100524/DI" xmlns:dc="http://www.omg.org/spec/DD/20100524/DC" xmlns:di="http://www.omg.org/spec/DD/20100524/DI" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" id="privacy_impact_review_definitions" targetNamespace="urn:flowss:advanced">
  <bpmn:message id="privacy_impact_review_message" name="New data use proposed"/>
  
  <bpmn:process id="privacy_impact_review_process" name="Privacy impact assessment with mitigation revision" isExecutable="false">
    <bpmn:documentation>Assess a proposed data use, its necessity and controls, then revise mitigations or stop the proposal if it cannot meet approved requirements. Inputs: New data use proposed. All policy choices, durations and conditions are illustrative. Replace example rules with approved local policy; configure integrations and review before execution. This non-executable template does not assert legal compliance or a real completed case.</bpmn:documentation>
    <bpmn:laneSet id="privacy_impact_review_lanes"><bpmn:lane id="privacy_impact_review_lane_0" name="Privacy reviewer"><bpmn:flowNodeRef>privacy_impact_review_start</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_intake_1</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_review_entry</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_checks_1</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_checks_2</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_checks_3</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_decision</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_success_1</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_success_rest_1</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_complete</bpmn:flowNodeRef></bpmn:lane><bpmn:lane id="privacy_impact_review_lane_1" name="Service owner"><bpmn:flowNodeRef>privacy_impact_review_remediation_entry</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_remediation_1</bpmn:flowNodeRef><bpmn:flowNodeRef>privacy_impact_review_resubmit</bpmn:flowNodeRef></bpmn:lane><bpmn:lane id="privacy_impact_review_lane_2" name="Accountable executive"><bpmn:flowNodeRef>privacy_impact_review_alternate</bpmn:flowNodeRef></bpmn:lane></bpmn:laneSet>
    <bpmn:startEvent id="privacy_impact_review_start" name="New data use proposed"><bpmn:messageEventDefinition id="privacy_impact_review_start_def" messageRef="privacy_impact_review_message"/></bpmn:startEvent>
    <bpmn:userTask id="privacy_impact_review_intake_1" name="Register processing purpose"></bpmn:userTask>
    <bpmn:exclusiveGateway id="privacy_impact_review_review_entry"></bpmn:exclusiveGateway>
    <bpmn:userTask id="privacy_impact_review_checks_1" name="Assess necessity"></bpmn:userTask>
    <bpmn:userTask id="privacy_impact_review_checks_2" name="Review retention controls"></bpmn:userTask>
    <bpmn:userTask id="privacy_impact_review_checks_3" name="Review subject access route"></bpmn:userTask>
    <bpmn:exclusiveGateway id="privacy_impact_review_decision" name="Controls sufficient?" default="privacy_impact_review_flow_8"></bpmn:exclusiveGateway>
    <bpmn:userTask id="privacy_impact_review_success_1" name="Record accepted controls"></bpmn:userTask>
    <bpmn:userTask id="privacy_impact_review_remediation_entry" name="Document unresolved exposure"></bpmn:userTask>
    <bpmn:userTask id="privacy_impact_review_success_rest_1" name="Authorize controlled pilot"></bpmn:userTask>
    <bpmn:endEvent id="privacy_impact_review_complete" name="Pilot authorized"></bpmn:endEvent>
    <bpmn:userTask id="privacy_impact_review_remediation_1" name="Revise processing design"></bpmn:userTask>
    <bpmn:exclusiveGateway id="privacy_impact_review_resubmit" name="Correction viable?" default="privacy_impact_review_flow_14"></bpmn:exclusiveGateway>
    <bpmn:endEvent id="privacy_impact_review_alternate" name="Data use stopped"></bpmn:endEvent>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_1" sourceRef="privacy_impact_review_start" targetRef="privacy_impact_review_intake_1"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_2" sourceRef="privacy_impact_review_intake_1" targetRef="privacy_impact_review_review_entry"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_3" sourceRef="privacy_impact_review_review_entry" targetRef="privacy_impact_review_checks_1"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_4" sourceRef="privacy_impact_review_checks_1" targetRef="privacy_impact_review_checks_2"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_5" sourceRef="privacy_impact_review_checks_2" targetRef="privacy_impact_review_checks_3"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_6" sourceRef="privacy_impact_review_checks_3" targetRef="privacy_impact_review_decision"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_7" sourceRef="privacy_impact_review_decision" targetRef="privacy_impact_review_success_1" name="Yes"><bpmn:conditionExpression xsi:type="bpmn:tFormalExpression">=privacyReady = true</bpmn:conditionExpression></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_8" sourceRef="privacy_impact_review_decision" targetRef="privacy_impact_review_remediation_entry" name="Otherwise"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_9" sourceRef="privacy_impact_review_success_1" targetRef="privacy_impact_review_success_rest_1"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_10" sourceRef="privacy_impact_review_success_rest_1" targetRef="privacy_impact_review_complete"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_11" sourceRef="privacy_impact_review_remediation_entry" targetRef="privacy_impact_review_remediation_1"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_12" sourceRef="privacy_impact_review_remediation_1" targetRef="privacy_impact_review_resubmit"></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_13" sourceRef="privacy_impact_review_resubmit" targetRef="privacy_impact_review_review_entry" name="Revise"><bpmn:conditionExpression xsi:type="bpmn:tFormalExpression">=correctionViable = true</bpmn:conditionExpression></bpmn:sequenceFlow>
    <bpmn:sequenceFlow id="privacy_impact_review_flow_14" sourceRef="privacy_impact_review_resubmit" targetRef="privacy_impact_review_alternate" name="Close"></bpmn:sequenceFlow>
  </bpmn:process>
  <bpmn:collaboration id="privacy_impact_review_collaboration"><bpmn:participant id="privacy_impact_review_party" name="Service design team"/><bpmn:participant id="privacy_impact_review_pool" name="Privacy impact assessment with mitigation revision" processRef="privacy_impact_review_process"/><bpmn:messageFlow id="privacy_impact_review_request" sourceRef="privacy_impact_review_party" targetRef="privacy_impact_review_start"/></bpmn:collaboration>
  <bpmndi:BPMNDiagram id="privacy_impact_review_diagram"><bpmndi:BPMNPlane id="privacy_impact_review_plane" bpmnElement="privacy_impact_review_collaboration">
    <bpmndi:BPMNShape id="privacy_impact_review_party_di" bpmnElement="privacy_impact_review_party" isHorizontal="true"><dc:Bounds x="20" y="20" width="2420" height="70"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_pool_di" bpmnElement="privacy_impact_review_pool" isHorizontal="true"><dc:Bounds x="20" y="180" width="2420" height="780"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_lane_0_di" bpmnElement="privacy_impact_review_lane_0" isHorizontal="true"><dc:Bounds x="50" y="180" width="2390" height="260"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_lane_1_di" bpmnElement="privacy_impact_review_lane_1" isHorizontal="true"><dc:Bounds x="50" y="440" width="2390" height="260"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_lane_2_di" bpmnElement="privacy_impact_review_lane_2" isHorizontal="true"><dc:Bounds x="50" y="700" width="2390" height="260"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_start_di" bpmnElement="privacy_impact_review_start"><dc:Bounds x="162" y="292" width="36" height="36"/><bpmndi:BPMNLabel><dc:Bounds x="108" y="335" width="144" height="40"/></bpmndi:BPMNLabel></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_intake_1_di" bpmnElement="privacy_impact_review_intake_1"><dc:Bounds x="325" y="272" width="130" height="76"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_review_entry_di" bpmnElement="privacy_impact_review_review_entry" isMarkerVisible="true"><dc:Bounds x="576" y="286" width="48" height="48"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_checks_1_di" bpmnElement="privacy_impact_review_checks_1"><dc:Bounds x="745" y="272" width="130" height="76"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_checks_2_di" bpmnElement="privacy_impact_review_checks_2"><dc:Bounds x="955" y="272" width="130" height="76"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_checks_3_di" bpmnElement="privacy_impact_review_checks_3"><dc:Bounds x="1165" y="272" width="130" height="76"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_decision_di" bpmnElement="privacy_impact_review_decision" isMarkerVisible="true"><dc:Bounds x="1416" y="286" width="48" height="48"/><bpmndi:BPMNLabel><dc:Bounds x="1368" y="236" width="144" height="40"/></bpmndi:BPMNLabel></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_success_1_di" bpmnElement="privacy_impact_review_success_1"><dc:Bounds x="1585" y="272" width="130" height="76"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_remediation_entry_di" bpmnElement="privacy_impact_review_remediation_entry"><dc:Bounds x="1585" y="532" width="130" height="76"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_success_rest_1_di" bpmnElement="privacy_impact_review_success_rest_1"><dc:Bounds x="1795" y="272" width="130" height="76"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_complete_di" bpmnElement="privacy_impact_review_complete"><dc:Bounds x="2052" y="292" width="36" height="36"/><bpmndi:BPMNLabel><dc:Bounds x="1998" y="335" width="144" height="40"/></bpmndi:BPMNLabel></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_remediation_1_di" bpmnElement="privacy_impact_review_remediation_1"><dc:Bounds x="1795" y="532" width="130" height="76"/></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_resubmit_di" bpmnElement="privacy_impact_review_resubmit" isMarkerVisible="true"><dc:Bounds x="2046" y="546" width="48" height="48"/><bpmndi:BPMNLabel><dc:Bounds x="1998" y="496" width="144" height="40"/></bpmndi:BPMNLabel></bpmndi:BPMNShape>
    <bpmndi:BPMNShape id="privacy_impact_review_alternate_di" bpmnElement="privacy_impact_review_alternate"><dc:Bounds x="2262" y="812" width="36" height="36"/><bpmndi:BPMNLabel><dc:Bounds x="2208" y="855" width="144" height="40"/></bpmndi:BPMNLabel></bpmndi:BPMNShape>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_1_di" bpmnElement="privacy_impact_review_flow_1"><di:waypoint x="198" y="310"/><di:waypoint x="325" y="310"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_2_di" bpmnElement="privacy_impact_review_flow_2"><di:waypoint x="455" y="310"/><di:waypoint x="576" y="310"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_3_di" bpmnElement="privacy_impact_review_flow_3"><di:waypoint x="624" y="310"/><di:waypoint x="745" y="310"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_4_di" bpmnElement="privacy_impact_review_flow_4"><di:waypoint x="875" y="310"/><di:waypoint x="955" y="310"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_5_di" bpmnElement="privacy_impact_review_flow_5"><di:waypoint x="1085" y="310"/><di:waypoint x="1165" y="310"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_6_di" bpmnElement="privacy_impact_review_flow_6"><di:waypoint x="1295" y="310"/><di:waypoint x="1416" y="310"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_7_di" bpmnElement="privacy_impact_review_flow_7"><di:waypoint x="1464" y="310"/><di:waypoint x="1585" y="310"/><bpmndi:BPMNLabel><dc:Bounds x="1472" y="283" width="100" height="22"/></bpmndi:BPMNLabel></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_8_di" bpmnElement="privacy_impact_review_flow_8"><di:waypoint x="1464" y="310"/><di:waypoint x="1525" y="310"/><di:waypoint x="1525" y="570"/><di:waypoint x="1585" y="570"/><bpmndi:BPMNLabel><dc:Bounds x="1472" y="320" width="100" height="22"/></bpmndi:BPMNLabel></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_9_di" bpmnElement="privacy_impact_review_flow_9"><di:waypoint x="1715" y="310"/><di:waypoint x="1795" y="310"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_10_di" bpmnElement="privacy_impact_review_flow_10"><di:waypoint x="1925" y="310"/><di:waypoint x="2052" y="310"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_11_di" bpmnElement="privacy_impact_review_flow_11"><di:waypoint x="1715" y="570"/><di:waypoint x="1795" y="570"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_12_di" bpmnElement="privacy_impact_review_flow_12"><di:waypoint x="1925" y="570"/><di:waypoint x="2046" y="570"/></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_13_di" bpmnElement="privacy_impact_review_flow_13"><di:waypoint x="2070" y="594"/><di:waypoint x="2070" y="676"/><di:waypoint x="526" y="676"/><di:waypoint x="526" y="310"/><di:waypoint x="576" y="310"/><bpmndi:BPMNLabel><dc:Bounds x="1962" y="679" width="100" height="22"/></bpmndi:BPMNLabel></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_flow_14_di" bpmnElement="privacy_impact_review_flow_14"><di:waypoint x="2094" y="570"/><di:waypoint x="2178" y="570"/><di:waypoint x="2178" y="830"/><di:waypoint x="2262" y="830"/><bpmndi:BPMNLabel><dc:Bounds x="2102" y="580" width="100" height="22"/></bpmndi:BPMNLabel></bpmndi:BPMNEdge>
    <bpmndi:BPMNEdge id="privacy_impact_review_request_di" bpmnElement="privacy_impact_review_request"><di:waypoint x="180" y="90"/><di:waypoint x="180" y="292"/></bpmndi:BPMNEdge>
    
  </bpmndi:BPMNPlane></bpmndi:BPMNDiagram>
</bpmn:definitions>