Choosing a platform and assessing its functions

1. Regulatory Concept & Core Standards

This video's topic is choosing a platform and assessing its functions. By the end, you should be able to assess a platform through verifiable requirements and tests. We will connect the information available, the criterion guiding the decision and the action that must be recorded. Follow the case and compare your answer with the proposed response. Setting up a channel involves people, procedures and technology. The platform supports operations, but the organisation still needs clear decisions on responsibilities, information protection and follow-up. This course covers preparing the service before receiving real reports.

Selection should follow channel needs, confidentiality and the Bulgarian procedure. Restricted access, record integrity, communication and registration are relevant. Anonymous reports do not initiate proceedings under the Act; technical anonymity does not change that rule. Do not assume every product has the same capabilities or automatically issues an official CPDP unique identification number.

Apply the following rule: Article 9 provides that anonymous reports do not initiate proceedings under this Act. This does not mean risk information must be ignored under another applicable procedure. Under article 10, people who initially reported anonymously outside the Act’s procedure or disclosed anonymously, and are later identified and subjected to retaliation, may be protected if the statutory conditions are met. Do not promise that every anonymous message will be handled as a valid ZZLPSPOIN report.

2. Practical Implementation & Procedure

Request a demonstration with fictional cases. Test permissions, safe notifications, controlled export and links to the form and register. Review processing contracts and exit arrangements. Check the actual procedure for obtaining a CPDP unique identification number. EU hosting alone does not resolve every data-protection issue. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

Two fictional platforms promise full compliance. One demonstrates separate roles and the required registration process. The other merely makes a marketing claim. The team asks for evidence and records dependencies on configuration and human action. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Which carries more weight in an assessment: a claim that a function exists or documented proof that it works? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

Documented demonstration, considered alongside the contractual and technical conditions. An advertised function may have limitations. Record the test, its result and any configuration or purchasing dependencies.

One mistake to avoid is: interpreting a certification or marketing promise as an automatic guarantee of full compliance.

Now apply the national rule to a second decision. The form always requires a name and identity document, but the page advertises anonymity. How should this be corrected?

First apply the national regime and define what the channel actually offers. Where identity is unnecessary, do not require it for technical convenience. Where it is a condition for a particular status, explain that before submission. Correct the fields and public information together while preserving material already received.