This is How You Work in Accordance with GDPR in Business Central

Monitoring paths enable traceability and the establishment of responsibilities.

Dynamics 365 Business Central offers a detailed change log that documents all direct changes to data by users. Changes to security-relevant system tables such as user and authorization settings are also recorded. These logs help to track responsibilities and make access transparent.

When you use the Microsoft Cloud, your data is stored securely and in compliance with the GDPR. It is stored in certified data centers and automatic encryption and other security measures are applied.

You can find more information about cloud security at Microsoft in our white paper: “Sicher in der Cloud? Geht doch!” (German).

You are responsible and obliged to review and respond to every data subject request immediately.

Dynamics 365 Business Central offers guided processes to handle requests for access, rectification, restriction of processing, export or erasure of personal data efficiently and in compliance with the law.

There are various ways to correct incomplete or incorrect data.

Mass editing with RapidStart
For quick editing of multiple records, you can export data to Excel with RapidStart to correct multiple records and then import the modified data from Excel.

Individual editing
You can also naturally edit customer data stored in any field by manually editing the data element containing the affected personal data.

You can export the customer data to an Excel file with RapidStart. You can then edit the customer data in Excel and save it in a standard, machine-readable format such as CSV or XML.

If you work carefully at the outset, you’ll save yourself later hassle. That’s why you should classify data sensitivity. This means classifying fields once and specifying the type of data they contain.

Categories:

• Sensitive
• Personal
• Confidential
• Normal

This facilitates the targeted management and control of sensitive data. For more information on the categories, please refer to Microsoft.

There are various ways to delete customer data.

Deleting individual data
You can delete customer data stored in any field manually by removing the data element containing the target customer data. This includes documents containing customer data, such as notes and booked sales and purchase invoices.

Deleting an entire customer
You can directly delete customer data by deleting a contact and then running the batch job “Delete Interaction Log Entries for Canceled Interactions” to delete interactions for that contact.

However, you must adhere to legal retention periods. You may delete purely personal data, but not data necessary for business operations (e.g., sales history).

You can sort, search, and filter customer data using conventional methods. Learn more in our blog article “Sortieren, Suchen und Filtern in Business Central” (German article).

The assignment of user rights can be finely granulated. You can set up individual access rights for different roles so that only authorized employees have access to personal data.