The DPO workspace (Data protection › DPO workspace) gathers what the data protection officer must be able to show about their work (GDPR articles 37 to 39). The whole module can read it; only data protection officers and administrators change it.
Appointment and notification
The DPO appointment card shows the officer set on the legal entity and records the notification to the supervisory authority: authority, date and filing reference.
National database register
When the entity's country model has a national database register (in Colombia, the SIC RNBD), the National database register card appears. The officer ticks whether the entity must register (the model recalls who is subject to it: asset threshold, legal nature). The card then lists the upcoming deadlines (yearly update, semiannual claims report, registration of a recently created database; indicative dates, public holidays not counted), and a reminder is sent to the officer two weeks before each one.
Registration is done online, on the authority's portal: the preparation sheet (CSV) gives, for each processing activity in force in the register, the information to enter (purposes, legal basis, data subjects and data, processor, transfers, security measures).
Tasks of the year
Each task is logged with its date, type (advice, opinion, training, awareness, audit, contact with the authority, rights request, other), subject and details. The Year filter shows the tasks of one year.
Action plan
The plan lists the compliance actions: priority, owner, due date and status (to do, in progress, done, dropped). An overdue action shows in red and counts in the dashboard. Closed actions are hidden by default.
Annual report
The Annual report (PDF) button produces the report of the chosen year: appointment and notification, tasks by type, compliance activity (processing activities, rights requests, breaches, impact assessments, by-design reviews), status of the security measures and action plan. It only contains figures and titles, never the identity of a data subject. The PDF template can be customized in the document templates. The report of the current year is also part of the compliance file.
Access log
The Access log button (data protection officers and administrators) shows who viewed, downloaded or exported sensitive data, when and through which channel. Filters cover the category, type of access, record type and period. Its retention is that of the audit log.