Technical Reconstruction of Data Flows
A technical data-flow analysis traces concrete data elements from source through processing, storage, interfaces, external recipients and deletion or retention, while separating observed flows from legal evaluation.
Read article
Technical and Organisational Measures
A control description is not evidence of implementation. A technical TOM assessment links the protection objective to the actual system control, configuration, evidence, test procedure, observed effectiveness and stated limitations.
Read article
Deletion, Retention and Access Rights
Deletion is a system behaviour, not a button label. A technical assessment traces data across storage classes, tests deletion and recovery paths and determines which users or services retain effective access.
Read article
Data Transfers and Interfaces
A technical transfer analysis identifies concrete interfaces, destinations, payloads, triggers and safeguards and separates those observable facts from legal conclusions about international transfers or lawfulness.
Read article
Technical Implementation of Data Minimisation
A technical minimisation assessment traces which fields are collected, where they are used, how long they persist and whether the system can technically operate with less or less-identifying data.
Read article
Pseudonymisation and Anonymisation
Removing names is not the same as anonymisation. A technical examination identifies direct and indirect identifiers, reconstructs pseudonymisation and evaluates re-linkability under an explicit attack model.
Read article