TIA — Transfer Impact Assessment for Jira — Docs

The Transfer Impact Assessment (TIA) for Jira helps organizations comply with Chapter 5 of the GDPR by assessing international data transfers directly within Jira Cloud.

The new Standard Contractual Clauses (SCCs) stipulate in Clause 14 that parties shall conduct a Transfer Impact Assessment to determine whether the transfer mechanism under Articles 45 et seq. of the GDPR effectively ensures an adequate level of data protection in the third country. If a TIA is not carefully drafted, the SCCs could become void, resulting in an unauthorized transfer of personal data from the EU to a third country and potential GDPR fines.

Demo

Features

• Overview dashboard for all Transfer Impact Assessment records
• Unlimited records — no limit on how many you can create
• Edit, change, and view records with a full audit activity log
• Delete TIA records without removing the associated Jira ticket
• Add unlimited documents as attachments to Jira tickets

Requirements

• Atlassian Jira Cloud (not available for Server or Data Center)
• Requires read, write, manage, and storage access to your Jira account
• All data is stored in your Atlassian Cloud instance — not shared with Unicis

Installation

Install from the Atlassian Marketplace.

After installation, grant the required permissions. Unicis TIA requires storage, manage, write, and read access to your Jira account — however, data stays within your Atlassian Cloud instance.

Configuration

1. Click Apps in the top Jira header → Manage your apps
2. On the side panel under APPS, click TIA Settings
3. Click Add Project and select the project from the dropdown

Available action per project:

• Delete — remove the project from TIA

Dashboard

The TIA dashboard provides an overview of all assessments for the selected Jira project:

Add a TIA

1. Open a Jira issue/ticket
2. Click … (three dots, top-right corner) → Register Transfer Impact Assessment
3. Complete all 5 steps by clicking Next (required fields are marked with a red star)

Steps:

1. Describe the intended transfer scenario
2. Determine the scenarios of problematic lawful access that are relevant
3. Determine factors that indicate a risk of problematic lawful access
4. Determine the probability of problematic lawful access
5. Conclusion

Edit

Two ways to edit a TIA record:

1. Via the dashboard by clicking the Edit icon
2. Via the Jira issue by clicking … → Register Transfer Impact Assessment

View

Click View Transfer Impact Assessment on the Issue Panel to see a tabbed view of all five steps and their recorded data:

1. Transfer scenario
2. Lawful access
3. Risk of lawful access
4. Probability of lawful access
5. Conclusion

Delete

Click the trash bin icon on the dashboard to delete a record.

Activity Logs

Access logs by opening the Jira ticket → Activity → Records of Transfer Impact Assessment.

Log format examples:

[Author] created the Record of Transfer Impact Assessment (M/DD/YYYY H:MM AM/PM)
[Author] updated the f) Data at issue (M/DD/YYYY H:MM AM/PM)
  Video data → Audio data

Logged events:

• Created
• Updated
• Deleted

Pricing

See the Atlassian Marketplace Apps pricing page.

Permissions

TIA performs the following actions on behalf of the user:

• Read and write to app storage (App Storage scope)
• Create and manage Jira issues
• Create and edit issues in Jira, post comments, create worklogs, and delete issues
• Manage project settings and create project-level objects (versions, components)
• View active user profile
• View Jira project and issue data

Technical Details

Built on Atlassian Forge UI Kit components using:

• ProjectPage
• IssueAction
• IssuePanel
• IssueActivity
• AdminPage

Required OAuth scopes:

read:jira-work
write:jira-work
manage:jira-project
storage:app

Changelog

v2.7.0

Release date: 2022-08-11

Bug and security fixes - AMS-23424

v2.4.0 - v2.6.0

Release date: 2022-12-26

Bug and security fixes - AMS-21716

v2.3.0

First release with MVP scope