Managing Third Parties
Huawei may engage third-party suppliers to process personal data (including customer and employee information) for specific business purposes. Personal data retained by suppliers beyond the specified period increases the risk of a data breach. This module is designed to mitigate the risk of overdue data retention and establish a mechanism in Huawei to manage the retention of personal data by suppliers.
Creating a Data Item
- Log in to the PCMC.
- In the navigation pane, choose Third-party Management. The Third-party Management page is displayed.
- Click Create in the upper left corner.
- Set parameters by referring to Table 1.
Table 1 Supplier data parameters Module
Parameter
Description
Basic Information
Procurement Requirement Department
The department within a company or organization that submits requirements for the procurement of necessary resources, including goods, equipment, and services, to support business operations.
Project Name
Project name.
Contract Start Time
Click
to select the contract start time.Contract End Time
Click
to select the contract end time.Supplier Number
A unique identifier of a supplier, which is usually a combination of numbers and letters.
Supplier Name
The name of a legal entity or individual that provides products, services, or raw materials to a company or organization.
Whether personal data delegation is involved
Select whether personal data delegation is involved.
Whether personal information flows out
Select whether outbound flows of personal information are involved.
Supplier processing purpose
The justification and objective for engaging a supplier.
Data Retention Information
Quantity of personal data entrusted to supplier for processing
Quantity of personal data entrusted to supplier for processing
Handler
Enter the handler.
Quantity of personal data entrusted to supplier for processing
In the drop-down list, select the type of personal data entrusted to the supplier for processing, for example, Name or Birthday.
Whether data is cross-border during entrusted processing
Select whether cross-border data transfer is involved during the entrusted processing.
Cross-border Target Country
If cross-border transfer is involved, select the target country or region.
Estimated data retention period on the supplier side
Click
to select the estimated data retention period on the supplier side.Method for disposing expired data on the supplier side
Specify the disposal method for expired data held by the supplier, for example, deletion.
Time for disposing expired data of the supplier
Click
to select the disposal date for expired data held by the supplier. - Click Next Step in the lower right corner and set Associated DI and Type of personal data entrusted to supplier for processing. You can click Associate DI in the upper left corner and select a DI from the dialog box that is displayed. Only approved DIs can be selected.
- Click Confirm.
Related Operations
- Click Edit in the Operation column to edit information about a third party.
- Click Delete in the Operation column to delete information about a third party.
- Click View in the Operation column to check information about a third party.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot