What the assistant can and cannot see for you

Steps

1. 1

   Look at the menu as the Data Protection Officer

   Signed in as the Data Protection Officer, on her own page, Data Protection, look at the left menu. There is no Tax group: her role does not let her open Tax Intelligence. The speech bubble at the top right is there, because her role includes the assistant.

2. 2

   Open the AI Assistant page

   Scroll the left menu to its end, open Tools under More, and choose AI Assistant.

   • Select Tools
   • Select AI Assistant
3. 3

   Ask about her own module

   Type: How many processing activities and data subject requests do we have?

   • Type Question box: How many processing activities and data subject requests do we have?
4. 4

   Send it and read the answer

   Select Send. The assistant reads Data Protection, which she may open, and reports one active processing activity, Online order delivery records, no transfers abroad, and no data subject requests. That matches the module. It also states the company's response period for requests: 30 days, extendable once, as a company policy, because the data protection law itself does not yet fix a number of days. A Sources passage on data subject rights is shown under the answer.

   • Select Send

   

5. 5

   Ask about a module she may not open

   Now type the question the compliance officer asked in lesson 6: Summarise the tax transactions recorded for this company, with amounts.

   • Type Question box: Summarise the tax transactions recorded for this company, with amounts…
6. 6

   Send it and read the refusal

   Select Send. The reply is short. I can't show you this. Tax transactions needs the permission Tax, Transactions, View on this company, which you don't hold. Who can grant it: Layla Hassan and Omar Khalid, the organisation's access administrators. No figures are given, and there is no Confidence figure, because nothing was answered.

   • Select Send
7. 7

   Ask for the compliance scores

   Type: What are our compliance scores for each module?

   • Type Question box: What are our compliance scores for each module?
8. 8

   Send it and read which scores she gets

   Select Send. The answer says that, with her permissions, the only module visible to her is Data Protection, and gives its score: 100 per cent, low risk. The scores of Tax and the other modules are not shown to her. Remember what that 100 per cent rests on: one processing activity and no requests. A score describes the records a module holds, not how well the company protects personal data.

   • Select Send