Considerations for GDPR readiness

Note: This document is intended to help you in your preparations for GDPR readiness. It provides information about features of IBM® Telco Network Cloud Manager - Performance that you can configure, and aspects of the product's use, that you must consider to help your organization with GDPR readiness. This information isn’t an exhaustive list, due to the many ways that clients can choose and configure features, and the large variety of ways that the product can be used in itself and with third-party applications and systems.

Clients are responsible for ensuring their own compliance with various laws and regulations, including the European Union General Data Protection Regulation. Clients are solely responsible for obtaining advice of competent legal counsel as to the identification and interpretation of any relevant laws and regulations that might affect the clients' business and any actions the clients might need to take to comply with such laws and regulations.

The products, services, and other capabilities described herein aren’t suitable for all client situations and might have restricted availability. IBM doesn’t provide legal, accounting, or auditing advice or represent or warrant that its services or products ensure that clients are in compliance with any law or regulation.

Table of contents

  1. GDPR
  2. Product Configuration for GDPR
  3. Data Life Cycle
  4. Data Collection
  5. Data Storage
  6. Data Access
  7. Data Processing
  8. Data Deletion
  9. Data Monitoring
  10. Capability for Restricting Use of Personal Data

GDPR

General Data Protection Regulation (GDPR) has been adopted by the European Union ("EU") and applies from May 25, 2018.

Why is GDPR important?
GDPR establishes a stronger data protection regulatory framework for processing of personal data of individuals. GDPR brings:
  • New and enhanced rights for individuals
  • Widened definition of personal data
  • New obligations for processors
  • Potential for significant financial penalties for noncompliance
  • Compulsory data breach notification
Read more about GDPR

Product Configuration - Considerations for GDPR Readiness

Offering configuration

The following sections provide considerations for configuring Telco Network Cloud Manager - Performance to help your organization with GDPR readiness.

The information that is collected and processed by Telco Network Cloud Manager - Performance is primarily network performance data, possibly with device connection information.

However, the user login credentials (username and password) are managed by the Security Service in Telco Network Cloud Manager - Performance with the help of OpenLDAP. You can configure your own LDAP for user authentication.

If Telco Network Cloud Manager - Performance is integrated with Dashboard Application Services Hub, you can configure to use the Security Services from Dashboard Application Services Hub.

Data Life Cycle

What is the end-to-end process through which personal data goes through when using the offering?

This offering processes network information. By default, the Security Service in Telco Network Cloud Manager - Performance manages the user credentials with OpenLDAP. You can configure to use the Security Services from Dashboard Application Services Hub. The personal content is limited to basic personal information.

Authentication among all the Pods on OpenShift® Container Platform and Kubernetes is handled by the Security Service in Telco Network Cloud Manager - Performance or from Dashboard Application Services Hub based on your system environment.

Personal data used for online contact with IBM
Telco Network Cloud Manager - Performance clients can submit online comments, feedback, or requests to contact IBM about Telco Network Cloud Manager - Performance subjects in various ways, primarily:
  • Public comments area on pages in the Telco Network Cloud Manager - Performance community on IBM developerWorks®
  • Public comments area on pages of Telco Network Cloud Manager - Performance documentation in IBM Knowledge Center
  • Public comments in the Telco Network Cloud Manager - Performance space of dWAnswers
  • Feedback forms in the Telco Network Cloud Manager - Performance community

Typically, only the client name and email address are used, to enable personal replies for the subject of the contact, and the use of personal data conforms to the IBM Online Privacy Statement.

Data Collection

Types of data collected

Telco Network Cloud Manager - Performance collects technically identifiable personal information such as device IDs, usage-based identifiers, static IP address.

In Telco Network Cloud Manager - Performance, you can also configure LDAP settings to use OpenLDAP.

Data Storage

Data in Telco Network Cloud Manager - Performance in different data sources for different types of data.
  • All the inventory data is stored in Cassandra database.
  • All the metric data is stored in CarbonData that is wrapped in DiamondDB Service.
  • All the system configuration data is stored in PostgreSQL database.
  • The data from all services is mounted on external Ceph for OpenShift Container Platform and NFS Service for Kubernetes.
For more information, see Data storage services Telco Network Cloud Manager - Performance.

Data Access

Only authenticated users with correct access rights can view the dashboards and configuration pages from Engine interface or from Dashboard Application Services Hub.

For the users, Telco Network Cloud Manager - Performance data access is through Dashboard Application Services Hub portal or from the user management in Dashboard Designer.

For more information, see User administration Telco Network Cloud Manager - Performance.

Data Processing

Telco Network Cloud Manager - Performance captures performance data from network devices. Network performance data does not contain traffic information from users, or personal device information when they connected to the network.

Data Deletion

Telco Network Cloud Manager - Performance metric data is deleted based on data retention. The data is removed after the specified retention periods.

For more information, see Retention period timeseries data.

Data Monitoring

No personal or user information is written into logs, but the log files aren’t encrypted in Telco Network Cloud Manager - Performance. Typically, only the Telco Network Cloud Manager - Performance administrator can access those log files and no usernames and passwords or IP addresses are included in memory dumps.

Capability for Restricting Use of Personal Data

In Telco Network Cloud Manager - Performance, data collection from network devices is restricted in following ways: