Data Protection Impact Assessment Guidance

PROCESSING OPERATION CONSIDERATIONS

RELEVANT INFORMATION ABOUT AXON CLOUD SERVICES


A systematic and extensive evaluation of personal aspects relating to natural persons which is based on automated processing, including profiling, and on which decisions are based that produce legal effects concerning the natural person or similarly significantly affect the natural person

Axon Cloud Services are not specifically designed to perform these types of automated processing of data.


Processing on a large scale of special categories of data referred to in GDPR Article 9(1), or of personal data relating to criminal convictions and offences referred to in GDPR Article 10

Axon Cloud Services provide capabilities to process on a large scale special categories of data relating to criminal convictions and offenses. Data controllers should determine applicability of this consideration based on their usage of Axon Cloud Services.


A systematic monitoring of a publically available area on a large scale

Axon Cloud Services are not specifically designed to perform systematic monitoring of a publicly available area on a large scale. However, customers can use Axon Cloud Services to process data collected through such monitoring. Data controllers should determine applicability of this consideration based on their usage of Axon Cloud Services.


SUPPLEMENTAL INFORMATION ABOUT AXON CLOUD SERVICES


Data Retention

Evidence retention periods are defined by the data controller within their internal retention policies and procedures. The data controller has the ability to establish Evidence retention policies within Axon Cloud Services. Additional information about Customer Data Retention is available in the Axon Cloud Services Privacy Policy. <link>


Data Location and Transfers

Axon Cloud Services are offered in numerous geographic regions. The data controller determines which regional deployment of Axon Cloud Services it wishes to utilize prior to tenant creation in Evidence.com. The data controller's selection determines where its Content will be stored. Axon's commitments to data location and transfer are available in the Axon Cloud Services Privacy Policy. <link>


Information Sharing

Axon may transfer data with its subsidiaries and Sub-processors including service providers and other partners to support the overall delivery of Axon products and service. Details about information sharing with Axon subsidiaries and Sub-processors are available in the Axon Cloud Services Privacy Policy. <link> Axon Cloud Services also enables customers to share data between their tenants. Customers are required to ensure appropriate data sharing agreements are in place to support sharing data. Such agreements should align with regulatory requirements and define data ownership, responsibilities and liabilities. Axon and the Axon Cloud Services sharing mechanisms do not define data ownership, responsibilities and liabilities.


Audit Trail

Axon Cloud Services provides an Evidence audit trail that logs the when, who, and what for interactions with Evidence. The audit trail logs cannot be edited or changed, even by tenant administrators.


Data Subject Rights

Within the scope and Axon's authorization to do so, Axon will work with data controller in fulfilling data subject requests when they exercise their rights under GDPR and LED. If Axon receives a request from the customer's data subjects to exercise one or more of its rights under GDPR or LED, the request will be redirected to the data controller. Additionally, Axon will not disclose Customer Content or any information about customer or customer's data subjects except as compelled by a court or administrative body or required by any law or regulation. Required disclosures information is available in the Axon Cloud Services Privacy Policy. <link>