“A GDPR data flow for employee onboarding: a new employee submits personal and tax details to an HR portal, which sends the onboarding form to an onboarding service; the service writes an employee record and onboarding audit log, sends payroll enrollment data to a payroll provider, and sends account provisioning data to an identity provider. Show each boundary.”
Comprenez les décisions qui le sous-tendent.
Personal and tax details enter through the HR portal.
Payroll and identity provisioning use separate processors.
The service records an onboarding event.
Use this DFD to map employee data before reviewing onboarding vendors and access controls.
Questions fréquentes
Why is the identity provider external?
The example treats account provisioning as a separate service so the boundary crossing is visible.
What belongs in HR records?
The exact fields depend on the organization; the diagram simply identifies the store receiving the employee record.
Can this include benefits data?
Yes. Add a benefits provider and label the specific enrollment data sent to it.