Difference between revisions of "Data Processing"

From Open Risk Manual
(ECB TRIM Requirements)
 
Line 12: Line 12:
 
* ''Ensuring that all data transformations are traceable and controlled.'' General guidelines and rules should be clearly formalised with regard to manual interventions within the data processing;
 
* ''Ensuring that all data transformations are traceable and controlled.'' General guidelines and rules should be clearly formalised with regard to manual interventions within the data processing;
 
* ''Ensuring timeliness and [[Accountability]].'' All data transfers should be formally agreed upon (for example by means of service-level agreements) by data providers and data users (for both outsourced and in-house processes).
 
* ''Ensuring timeliness and [[Accountability]].'' All data transfers should be formally agreed upon (for example by means of service-level agreements) by data providers and data users (for both outsourced and in-house processes).
 +
 +
== See Also ==
 +
* [[Processing of Personal Data]]
  
 
== References ==
 
== References ==
Line 18: Line 21:
 
[[Category:Risk Data]]
 
[[Category:Risk Data]]
 
[[Category:ECB TRIM]]
 
[[Category:ECB TRIM]]
 +
[[Category:Data Privacy]]

Revision as of 23:32, 27 September 2021

Definition

Data Processing denotes the set of automated or manual operations that an organization may perform on its material digital data flows. It comprises of activities such as:

  • Data Sourcing (also Data Collection)
  • Data Storage (persistence of data in databases)
  • Data Validation
  • Data Migration
  • Data Use

ECB TRIM Requirements

Data Processing in regulated financial institutions is subject to specific requirements[1] in particular with regard to manual interventions and data transfers:

  • Ensuring that all data transformations are traceable and controlled. General guidelines and rules should be clearly formalised with regard to manual interventions within the data processing;
  • Ensuring timeliness and Accountability. All data transfers should be formally agreed upon (for example by means of service-level agreements) by data providers and data users (for both outsourced and in-house processes).

See Also

References

  1. ECB guide to internal models - Credit Risk, Sep 2018