GRCLibrary.ai

Standard

Network Telemetry and DPI Controls Standard

This standard defines the technical controls applied to network telemetry used in workforce network monitoring: flow telemetry (connection and traffic metadata) and deep-packet-inspection (DPI) telemetry (telemetry derived from inspecting packet content). It sets requirements for how such telemetry is scoped, minimized, and configured so that the collection stays confined to metadata wherever the aim allows, by default excludes special-category-revealing data and personal-device traffic before that data enters the pipeline (subject only to the narrow, documented, approval-gated exception this standard defines for special-category data), and, where telemetry is aggregated, resists re-identification.

Type
Standard
Version
0.1.2
Date
2026-10-24
Owner
Data Protection Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Privacy
Review frequency
Annual and upon material privacy, employment-law, framework, or monitoring-technology change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • 1. Purpose
  • 2. Scope
  • 3. Definitions
  • 4. Relationship to the parent policy and to lawful basis
  • 5. Requirements
  • 6. Roles and responsibilities
  • 7. Framework alignment
  • 8. Limitations

Frameworks it maps to

Related documents