In the Data Privacy Assistant you prepare two flows: reporting data breaches and handling data subject rights. Open the Data Privacy Assistant and use the cards Configure Breach Management and Configure Data Subject Rights Management. On the first page you record the internal notification contacts and your supervisory authority; on the second you set the authorized handlers and enable the public portal.
Configure breach management
Open the configuration page
Open the Data Privacy Assistant. On the overview, click the Configure Breach Management card. The page explains that you decide who is notified when a data breach is reported and that you record the contact details of your supervisory authority.
Select internal notification contacts
In the Internal Notification Contacts block, select the team members who should be notified immediately when a data breach is reported. The privacy responsible person and data protection officer recorded in the introduction appear pre-selected in the Data Privacy Representatives block. Activate further people with data privacy access via the checkboxes under Team Members.
Add additional contacts
If the team selection is not enough, click Add Contact under Additional Contacts and enter a name, email address, and role. The email address is required for such contacts. At least one internal contact must be selected overall.
Record the supervisory authority
In the Supervisory Authority block, first choose the Country. For Germany, pick under State (for specific authority) either the responsible state authority or the Federal Authority (BfDI). Then enter the Authority Name, email, phone, and website. This authority must be notified within 72 hours of a reportable breach.
Save the configuration
Click Save. Cenedril checks the required fields and applies the configuration. You then return to the Data Privacy Assistant overview, where the card appears as configured.
Result: the internal notification contacts and the responsible supervisory authority are recorded. As soon as a data breach is reported, the recipients and authority contact are ready for the operational handling.
Configure data subject rights
Open the configuration page
Return to the Data Privacy Assistant overview and open the Configure Data Subject Rights Management card. The page shows two areas: Access Management and Public Portal.
Set the authorized handlers
Under Access Management, select the team members allowed to manage data subject rights requests and the related conversations. The privacy responsible person and data protection officer are pre-selected in the Data Privacy Representatives block. Portfolio users with documentation access appear in their own block below.
Enable the public portal
In the Public Portal block, use the Enable Public Data Subject Rights Portal switch to unlock the public submission page. Once enabled, Cenedril shows the link under Public Portal URL. Use Copy to take it and add it to your privacy policy.
Save the configuration
Click Save. Cenedril stores the authorized handlers and the portal status. You then return to the Data Privacy Assistant overview.
Result: the authorized people can handle incoming requests, and the public portal accepts requests from data subjects once you have published the link.