#
The General Data Protection Regulation (GDPR) (Regulation [EU] 2016/679) was adopted in April 2016, replacing Directive 95/46/EC.
It strengthens and unifies data protection for individuals within the European Union and applies to organisations both inside and outside the EU that process EU residents’ data.
GDPR requires explicit consent before personal data can be used and obliges organisations to ensure their systems can handle requests such as:
- Data deletion
- Access to stored data
- Data modification
The regulation has been effective since May 25, 2018.
It applies to:
- Organisations based in the EU
- Organisations outside the EU offering goods/services to or monitoring EU residents
Benefits
#
- Strengthens individual data protection rights
- Expands EU data privacy scope beyond EU borders
- Increases transparency and accountability in data handling
- Enforces structured PII inventory and governance
What It’s Used For
#
GDPR ensures organisations properly manage and protect Personally Identifiable Information (PII) across their systems, processes, and storage layers.
Compliance requires organisations to demonstrate best efforts in identifying and documenting all stored and processed PII.
What the View Shows
#
Quality Clouds supports GDPR efforts by identifying PII usage in:
- Source code within your SaaS instance
- Custom table names
- Custom field/column names
The system scans for main and extra-sensitive PII keywords and raises each match as an issue in scan results.
Keyword matching is enabled by default in:
- English, Spanish, German, French
- Additional languages can be added via Custom Rules.
How to Use It
#
Unlike standard best-practice violations, GDPR issues are raised whenever a PII keyword is detected in code, table names, or field names.
These findings do not automatically require removal if the usage is legitimate.
Remediation means:
- Including identified elements in the organisation’s complete PII inventory (global register of stored and processed personal data).
Use Case
#
The GDPR issues are included in the Data Privacy view with the following impact:
| ID | Description | Severity | Area of impact | Affected element | Covered by Quality Clouds | Covered by free scan utility |
|---|---|---|---|---|---|---|
| 3000 | Possible PII usage in configuration element | Warning | Security | All CE types | Only for clients with GDPR add-on enabled | |
| 3001 | Possible extra-sensitive PII usage in configuration element | High | Security | All CE types | Only for clients with GDPR add-on enabled | |
| 4000 | Possible use of private data | Warning | Security | All CE types |
List of Personally Identifiable Information (PII)
#
Languages covered: English, French, Spanish and German.
Tables can be exported in .csv format.
| # | PII | Field names to look for | PII Type |
|---|---|---|---|
| 1 | Taxpayer Identification Number (Social Security Number) | SSS; social number; taxpayer; security number; | Sensitive data |
| 2 | Citizenship Number | National ID numbers; Social security number; ID Number; passport; passport number; IDNumber; | Sensitive data |
| 3 | Addresses | home; address; ZIP code; Post code; | Sensitive data |
| 4 | Home Phone | Phone number; land line; | Sensitive data |
| 5 | Mobile Phone | mobile number; mobile; | Sensitive data |
| 6 | email; email address; | Sensitive data | |
| 7 | Date of Birth | Date of birth; birth date; | Sensitive data |
| 8 | Place of Birth | birthplace; birth place; | Sensitive data |
| 9 | Business Telephone Number | Sensitive data | |
| 10 | Race | Extra-sensitive data | |
| 11 | Religion | Extra-sensitive data | |
| 12 | Ethnicity | Ethnicity | Extra-sensitive data |
| 13 | Gender | gender; males; female | Extra-sensitive data |
| 14 | Visa Permits Number | Visa; visa permit; | Extra-sensitive data |
| 15 | Driver’s License Number | Driver license; driver licence | Sensitive data |
| 16 | Vehicle Registration Plate Number | Sensitive data | |
| 17 | Disability Information | disability | Extra-sensitive data |
| 18 | Sexual Orientation | sexual orientation; sex; sexual; | Extra-sensitive data |
| 19 | Education and Employment History | education history; employment history; | Sensitive data |
| 20 | Salary | salary | Extra-sensitive data |
| 21 | Job Position / Title | job title; job position; | Sensitive data |
| 22 | Photos | personal picture; photo | Sensitive data |
| 23 | Political and Religious Leanings and Affiliation | religion; politics; politic; political party; | Sensitive data |
| 24 | Insurance Details | insurance number; | Sensitive data |
| 25 | Medical Information | medical record; medical status; health status; health | Extra-sensitive data |
| 26 | Criminal Record | criminal record; criminal data; | Extra-sensitive data |
| 27 | Credit Score / Record | credit score; credit information; credit card; account number; bank number; | Extra-sensitive data |
| 28 | Mother Maiden Name | mother maiden name; mother name | Sensitive data |
