Privacy Program / Privacy by Design
Evaluation of global Data Protection / Privacy corporate risk
High-level evaluation of the company’s or group’s privacy stance and risk resulting from their operations, locations and applicable regulations (both sectoral and Privacy national/regional/local regulations will be taken into account).
Assessment of Privacy Program’s current state
Evaluation of the maturity of existing privacy programs against chosen applicable regulation(s). Reporting of outstanding risks and gaps. Suggestion of prioritized actionable recommendations/remediation actions. After an assessment has been performed, an audit version of the service can be proposed to regularly ascertain status of the program.
Auditing Compliance of Processing activities
Different processing activities are often at different levels of maturity. When, after hard work, a processing activity achieves your desired maturity we will help you certify that it continues to perform as designed.
Program development, Policies & Processes’ development, Privacy governance
Where the customer has identified shortcomings in their privacy program, we will work with the company to develop custom processes, fitted to your company’s governance frameworks, to effectively remediate the gaps. We will document the process to ensure the accountability and will offer customized training where needed.
Performance of PIA / DPIA
When you introduce a new process, or are changing one, that could bring risk to the persons whose data is being processed, you shall perform an impact assessment to fully understand the risks and their mitigations. Not only a good practice, but some regulations mandate a PIA/DPIA is performed prior to the commencement of the processing.
Designing a compliant Processing Activity or Product
Launching a new processing activity or product or IT system requires a diligent consideration of privacy aspects. While this could be seen as the PIA/DPIA process, we believe an early involvement of the privacy experts in the design phase bring certainty of compliance on the development and implementation phase of the project, saving your company time and money and reducing the risks considerably.
Privacy by design advisory
Implementing Privacy by design is often uncertain and frustrating. We will assist you with guidance, training, and support. Whether it is a specific project, your whole privacy program, or adjusting the dynamics of an existing team, you can consult with us.
Privacy Managed Services
If your privacy team is not as big as it should, you can count on us to assume part of your duties. We will design a proposition, including any of our services, to meet your needs and fill your gaps working closely with you.