Paperwork, already half done

DPIA starter: Microsoft Intune

from trust card 2 answers · you answer 7 left

1. What personal data does the tool process, and where?
   you answer
2. Where does processing happen?
   from trust card · maker says Set by the country in your Microsoft Entra directory when Intune is first set up: North America, Europe (EU and EFTA only, inside the EU Data Boundary), Asia Pacific, or local Australia, India and Switzerland. Exceptions: support and troubleshooting, content-delivery caching, preview features (usually stored in the US), and end-user notification emails (processed in EMEA for EMEA customers).
3. Who else receives the data (sub-processors)?
   you answer
4. How long is it kept?
   from trust card · maker says Personal data is generally removed within 30 days of deletion; audit logs are kept for up to two years.
5. The supplier’s role under UK GDPR
   you answer
6. Why do you need this processing?
   you answer
7. Who are the data subjects?
   you answer
8. Main risks, and what reduces them
   you answer
9. Residual risk after controls
   you answer