Control Evidence Mappings
Each control mapping documents what evidence Vallum produces to support your compliance program, what it does not produce, known limitations, and what remains your responsibility.
In Progress (18)
These mappings are under editorial review and will be published after quality verification.
GDPR-Art5: Principles relating to processing of personal data including lawfulness, fairness, and transparency
GDPR · Under review
GDPR-Art6: Lawfulness of processing with legal basis requirements
GDPR · Under review
GDPR-Art12: Transparent information, communication, and modalities for exercising data subject rights
GDPR · Under review
GDPR-Art13: Information to be provided where personal data are collected from the data subject
GDPR · Under review
GDPR-Art14: Information to be provided where personal data have not been obtained from the data subject
GDPR · Under review
GDPR-Art15: Right of access by the data subject to their personal data
GDPR · Under review
GDPR-Art17: Right to erasure and the right to be forgotten
GDPR · Under review
GDPR-Art20: Right to data portability between controllers
GDPR · Under review
GDPR-Art22: Automated individual decision-making including profiling with safeguards
GDPR · Under review
GDPR-Art25: Data protection by design and by default in processing operations
GDPR · Under review
GDPR-Art28: Obligations of processors with contractual requirements
GDPR · Under review
GDPR-Art30: Records of processing activities maintained by controller and processor
GDPR · Under review
GDPR-Art32: Security of processing with appropriate technical and organizational measures
GDPR · Under review
GDPR-Art33: Notification of personal data breach to supervisory authority
GDPR · Under review
GDPR-Art35: Data protection impact assessment for high-risk processing operations
GDPR · Under review
GDPR-Art37: Designation and position of data protection officer
GDPR · Under review
GDPR-Art44: Conditions for international transfers of personal data
GDPR · Under review
GDPR-Art31: Cooperation with supervisory authority in performance of its tasks
GDPR · Under review