1. Intro To Privacy Program Management Flashcards
Define: Privacy Program Management
A structured approach to using frameworks and life cycle to protect PII
Privacy Governance Lifecycle
Assess - involves comparing industry best practices, corporate policies, applicable laws an regulations.
Protect - embeds info sec practices to address, define, and establish privacy practices.
Sustain - provides monitoring, auditing, and communication aspect of management framework.
Respond - involves information requests, legal compliance, incident response planning and handling, as well as accountability.
Privacy Program Manager’s Responsibility (CAA)
Compliance
Accountability - most important aspect accountable for safekeeping and use of PII.
Alignment with Organizational Strategies
Key Motivators For Privacy Program
Compliance
Meeting expectations of business clients are partners
Safeguarding Data
Successful Privacy Program integrates across the organization
HR
Finance
Marketing
Business Development
Info Sec
IT
Legal
Compliance
Goals of a Privacy Program Manager
- Define privacy obligations for the org
- Identify and mitigate privacy risks
- Identify documentation, policies, and procedures around management of personal info
- Create, revise, and implement policies and procedures
- Raise the data IQ of the org to drive and embed privacy-oriented culture
Goals of a Privacy Program
- Demonstrate an effective and auditable framework for compliance
- Promote trust and confidence in data by data subjects
- Highlight that the org takes privacy seriously
- Respond effectively to privacy breaches and DSARs
- Continuous monitoring, maintaining and improving the maturity of the program