Version history

Document version	Release	Comments
Version 11	2024 R1	This version includes all considerations relevant to mobile servers and devices. It includes all changes from versions 5, 6, and 9, which are specific to mobile.
Version 10	2023 R3	Updates in this release include: Recommendations to create a system configuration password added to Additional safeguards. Recommendations regarding images in alarm reports added to Additional safeguards.
Version 9	2023 R2	Updates in this release include: Recommendations regarding alarm reports added to Additional safeguards. Recommendations on how to remove device registration data for mobile devices added to Personal data and registered mobile devices.
Version 8	2023 R1	Updates in this release include: Recommendations on how to handle SQL Server database backups added to Backup the SQL Server databases . Do not use a managed SQL Server service added to Do not use a managed SQL Server service.
Version 7	2023 R1	Updates in this release include: Safeguards for creating reports in XProtect Incident Manager added to Additional safeguards.
Version 6	2022 R3	Updates in the release include: Recommendation to export from XProtect Smart Client rather than from XProtect Web Client if privacy masking is required, added to Handling exported data. Additional recommendations on how to safeguard mobile devices and handle lost or stolen mobile devices added to Policies to safeguard use of mobile devices. Biometric authentication with mobile clients described in Policies to safeguard use of mobile devices.
Version 5	2022 R2	Updates in this release include: Recommendations concerning evidence lock added to Considerations regarding evidence lock. Recommendations concerning video push and body worn video added to Considerations regarding video push. Recommendation to encrypt investigations database on the Mobile Server and to enable and use two-step verification added to What should you do to ensure privacy by design?. Recommendations on how to safeguard mobile devices and handle lost or stolen mobile devices added to Policies to safeguard use of mobile devices. XProtect Mobile Server, XProtect Mobile client, and XProtect Web Client are included (Appendix: The Milestone XProtect VMS system and GDPR). Risk of violating GDPR described in Data collection and privacy settings. Recommendation on how to handle push notification added to Additional safeguards. New appendix added: Appendix: Data processing performed in external cloud services.
Version 4	2022 R1	Updates in this release include: Encryption for communication between all servers and clients added to How XProtect reduces the impact on the interests or fundamental rights and freedoms of the data subject. Recommendations to enable encryption for all communication between all servers and clients added to What should you do to ensure privacy by design?. Recommendations to enable encryption for all communication between all servers and clients added to Protecting stored and transmitted data. XProtect Rapid REVIEW added to Components and devices that are not covered. Recommendations removed from Additional safeguards because Milestone XProtect VMS now supports encryption for communication between all servers and clients. Added information about data sources as a result of the external IDP to Personal data from the environment. Added information to Personal data from the system about how the IDP logs data and about the removal of personal data in all VMS debug logs. Updated Authentication and authorization data: GDPR support for Basic Users Recommendations regarding external IDP Encryption of tokens, thereby no longer requiring extra safeguards
Version 3	2021 R2	Updates in this release include: Safeguards against operating a VPN in split mode added to Additional safeguards.
Version 2	2021 R1	Updates in this release include: Basic user type is now coverd (Appendix: The Milestone XProtect VMS system and GDPR) and (Appendix: Data processing in the Milestone XProtect VMS environment). Recommendations added to Using geographic backgrounds in XProtect Smart Client. Data collection described in Integrations from registered partners. Authentication logging described in Personal data from the system.
Version 1	2020 R3	This is the first release of this document.