Privacy settings
Set controller details, covered regulations, data-subject regions, and the security-measure catalog.
What it is
The Privacy tab holds your organisation details, privacy contact, regulation coverage, and security measures. Editors and admins can maintain Privacy settings; other organisation settings remain admin-only.
SettingsPrivacyThe “What a regulator would see” section previews your draft using the same styling as the rest of Settings. Missing required values appear in red. DPO and EU representative details are required for setup when GDPR is selected; missing details appear in red.
Complete the required sections
- Regulation coverage: choose the countries where your data subjects are. The picker lists only countries that produce a regulation suggestion. Review suggested regimes and their geographic or data-map signals, and search the full catalogue to choose additional coverage. Suggestions do not establish legal applicability.
- Organisation details: record your legal entity name, registered address, and jurisdiction. Required fields are marked with an asterisk.
- Privacy contact: select someone from the organisation directory or enter an external contact's name and email.
- Security measures: select only starter measures you actually have in place, or choose Add your own. Edit names, descriptions, categories, organisation-wide applicability. Starter measures are initially unticked; this editor does not link measures to platform controls.
The setup count includes these four sections. Selecting GDPR adds a fifth required section, GDPR-specific, which stays expanded. Complete the DPO name and email, and EU representative name, email, and address to finish setup. Turning GDPR off hides the section without deleting its saved details. Sidebar links jump to sections without completion checkmarks. The Default role determines which register new processing activities belong to when they have no explicit role.
Save or discard changes
One sticky Save / Discard bar covers the whole tab. Changes to coverage, contacts, controller details, and measures remain drafts until saved. You can save partial progress, even with required controller fields missing. Settings and measure changes are committed together, so a failed save cannot leave a partly updated configuration.
Removing an existing measure schedules it for archiving when you save. Archived measures remain attached to records that already claim them. Discard restores the saved settings. Switching settings tabs or following a link away from a dirty form asks whether to discard; reloading or closing the page invokes the browser's unsaved-changes warning.
Where the values are used
Controller and contact details populate the Article 30 header. Organisation-wide measures are inherited by processing records. Coverage determines the legal scope of subsequent scans; existing scans retain their original scope. Noru does not decide which laws apply, appoint a DPO, or validate an EU representative.
Related
Last updated on