Data Discovery Map, manage, and secure your data Protiviti helps you remain compliant with data privacy regulations by mapping sensitive and personal data and outlining the priority risks unique to your organisation. Which processing operations present higher data protection risk? How does your organisation currently comply with regulatory obligations? Is my organisation in compliance with the regulation? If we are in compliance, how can we prove it? If we are not in compliance, how and when do we plan to achieve compliance? Do we have a good understanding of where our data is and how it flows through our internal systems? Data discovery helps your organisation identify risks and secure information by giving you the insight to understand how personal data flows throughout your organisation. Additionally, data discovery provides the framework to support breach notifications and respond to data requests (e.g., delete, correct, access). Understand how personal data flows throughout your organisation Our Data Discovery solutions Pro Briefcase Data Mapping To establish an internal compliance baseline, we develop asset-based inventory mapping and process data flow diagrams to visually represent key data collection and data transmission points, including cross-border data transfers and third parties. Pro Building office Records of Processing Activities (RoPA) Protiviti helps you establish a formal inventory of data processing operations and supporting systems where personal data is collected, processed, stored, and/or otherwise transmitted or sold to third parties. Pro Document Consent Privacy Obligations For company-wide transparency and compliance efficacy, we help establish a formal baseline and scope of privacy obligations based on applicable privacy regulations, including but not limited to GDPR, CCPA/CPRA, HIPAA, PIPEDA, and LGPD. Pro Rightmark Square Third-Party Contract Review No matter your company size, partnering with third-party vendors is a business standard. We help companies evaluate and redline contractual agreements with third-party processors to ensure data privacy compliance. Pro Legal Briefcase Privacy Program Optimisation Data has value for both business growth and compliance. We help you centralise, operationalise, and optimise your data by leveraging industry-leading privacy frameworks for company-wide protection and compliance, such as GDPR, AICPA, and NIST Privacy Framework. Featured insights INSIGHTS PAPER Best Practices for Building a Sustainable PCI DSS Compliance Program Creating and maintaining a sustainable PCI DSS compliance program is a crucial and complex task for organisations to protect payment card transactions and uphold consumer trust. However, despite the PCI DSS standard being around for almost 20 years,... BLOG Put Privacy First To Build Trust and Elevate the Customer Experience This blog was originally posted on Forbes.com. Kim Bozzella is a member of the Forbes Technology Council. Here's a problem I often see: Most businesses recognize the significance of data privacy and identity management in safeguarding information,... FLASH REPORT The American Privacy Rights Act of 2024: Could this framework become the data privacy panacea? On April 8, 2024, U.S. Representative Cathy McMorris Rodgers (R-WA) and U.S. Senator Maria Cantwell (D-WA) announced the American Privacy Rights Act. This act aims to establish a comprehensive set of rules that govern the usage of citizens' data. The... INSIGHTS PAPER Mastering Data Dilemmas: Navigating Privacy, Localisation and Sovereignty In today's digital age, data privacy management is paramount for businesses and individuals alike. With the ever-changing regulatory landscape surrounding data protection, organisations must adapt swiftly to ensure compliance and maintain trust with... BLOG Protecting Controlled Unclassified Information Across Data Ecosystems Companies that work with the Department of Defense (DoD) know that it is critical to store data properly and are constantly on guard against controlled unclassified information (CUI, sometimes pronounced cooey) in their environments. Organizations... Button Button Protiviti helps build the foundations of a strong but flexible privacy program Our comprehensive approach to Data Privacy Data privacy regulations are in flux globally. Even as companies put the finishing touches on extensive preparations to comply with applicable privacy laws, such as the European Union’s GDPR and California’s Consumer Privacy Act, new regulations continue to be introduced in other countries. As legislators pass new laws, they continuously amend those already in effect. Data privacy regulations are not static. The problem and proposed solutions are complex and evolving. One thing is almost certain—anyone aiming to comply with a specific regulation with a target date in mind will be disappointed as those near-term obligations are supplanted by new and different rules over the mid and long-term. In response to this changing landscape, Protiviti applies a holistic framework that addresses the fundamental aspects of data privacy without being locked into any one specific compliance format. We focus on the most pressing data privacy issues companies face, including: Developing strategies to address global data privacy regulations Compliance with regulatory obligations Addressing resource and skill shortages Operationalising privacy needs Implementing privacy tools and remediation support By working ahead of the law in a comprehensive fashion, Protiviti helps build the foundations of a strong but flexible privacy program that includes understanding principles, educating stakeholders, and developing an applicable governance structure for managing changes. This base enables companies and their stakeholders to look to the uncertain future of privacy regulations with greater confidence. Protiviti helps build the foundations of a strong but flexible privacy program Global Chocolatier Adopts Privacy Technology to Prevent Data Exposure Data privacy and compliance do not only affect the safety of an organisation’s employees and customers, but they can also affect future business as customers increasingly prioritize security. Protiviti helped a global chocolatier transform its privacy program and be fully compliant in the wake of the COVID-19 pandemic. Read More Achieve Regulatory Compliance and Remain Competitive With new data privacy laws constantly being introduced in different countries and states, it can be hard to keep up. Protiviti’s privacy compliance services give you confidence as you face the uncertain future of privacy laws. Tailored, Full-Service Support for Privacy Priorities Today’s consumers demand privacy and control over their data—and organisations need to respond accordingly. Protiviti’s privacy as a service experts deliver custom solutions and full-service support for your privacy governance and compliance needs. Key Data Privacy partners We partner closely with cybersecurity and privacy market leaders, ensuring our clients receive the best solutions to meet their needs. Notably, Protiviti has performed more global implementations than other OneTrust partners and has well over 175 OneTrust-certified consultants, including more than 10% of the global population of OneTrust Fellows of Privacy Technology spread across Europe, the Americas, and the Asia-Pacific regions. Some of our top partners include: Leadership Sameer Ansari Sameer Ansari is a Managing Director and leader of Protiviti’s Security and Privacy Practice. Sameer brings more than 20 years of experience developing and delivering complex privacy solutions to the Financial Industry, and privacy consulting and implementation ... Learn More Philip Greaves Philip is a Managing Director in Protiviti’s London Technology Consulting practice, leading solutions around Technology Strategy and Operations, Technology Risk, Third Party Risk and Privacy. He has over 20 years experience in consulting and previous worked for Andersen ... Learn More Tjakko de Boer Tjakko is Managing Director in the Technology Consulting practice at Protiviti’s Amsterdam office. For over 20 years he assisted clients to leverage Digital solutions, improve performance, and manage operational risk and control. Key focus areas include Information ... Learn More Enrico Ferretti Enrico Ferretti has been with Protiviti since 2007 and is responsible for the Technology Consulting service line and the Telecommunication industry in Italy. Previously, Enrico gained more than ten years of professional experience in Accenture, where he held various ... Learn More What is next for CISOs? The CISO Next initiative produces content and events crafted exclusively for CISOs, with CISOs. The resources focus on what CISOs need to succeed. The first step is finding out “What CISO type are you?” Get Involved
