GDPR

Temenos supports data protection functionality to make the following bank users (New Prospects, Verified Prospects, Customers) manage their own data. As part of Data protection functionality, Temenos provides the following capabilities to aid data protection principles.

• Provides the capability to generate the report of personal data for an individual based on user request (from all Temenos systems).
  • Report Generation => Subject Access Request Reports (SAR), Data Portability Reports (DP)

• Provides the capability to erase the personal data of an individual when certain conditions are met (from all Temenos systems).
  • Data Erasure => Anonymizes the data stored in the respective Microservice.

Currently, the data protection processing is transact-driven. While processing the SAR/DP or erasure requests in transact, it will be communicating with the external systems like Microservices via command events.

SAR/DP Processing

• For SAR/DP request event, the Microservice tries to fetch the required personal data mentioned as part of the event.
• If the data is fetched successfully, then a successful response will be sent to transact along with the data fetched.
• Otherwise, a failure response will be sent to transact.

Erasure Processing

•  For an erasure request event, the Microservice tries to anonymize the data mentioned as part of the event. Anonymization can be done in different ways based on the erase option details that are present as part of the request event.
• Erase Option
  • ALPHA: Masks the information with the alphanumeric character mentioned in erase option value.
  • NUMBER: Masks the information with the number mentioned in erase option value.
  • NULLIFY: Deletes the information.
• If the data is erased successfully, then a successful response will be sent to transact.
• Otherwise, a failure response will be sent to transact.