GDPR Configuration

Temenos supports data protection functionality for bank users to manage their data, including New Prospects, Verified Prospects, and Customers. Temenos provides the following capabilities to aid data protection principles as part of the functionality.

• It generates personal data as a report for an individual based on user request (from Temenos systems).
  • Report Generation = Subject Access Request Reports (SAR), Data Portability Reports (DP).
• It erases the personal data of an individual when certain conditions are met (from Temenos systems).
  • Data Erasure = Anonymizes the data stored in the respective Microservice.

Currently, the data protection processing is transact-driven. While processing the SAR/DP or erasure requests in transacting, it communicates with external systems like Microservices via command events.

SAR/ DP Processing

• For SAR/DP Request event, the Microservice tries to fetch the required personal data as part of the event.

• Transact team receives a message based on the following conditions:

• A successful message appears to the transact team if the data fetched is successful.
• A failure message appears to the transact team if the data fetched is unsuccessful.

Erasure Processing

• For an Erasure Request event, the Microservice tries to anonymize the data as part of the event. Anonymization is performed differently based on the erase option details present in the request event.

Erase Option

• ALPHA: Masks the information with the alphanumeric character mentioned in erase option value.

• NUMBER: Masks the information with the number mentioned in erase option value.

• NULLIFY: Deletes the information.

If the data erase successfully, a successful response appears to the transact team, else; a failed response appears.