Intro

Question 1

Key concepts

Answer 1

*Privacy by Design = operational privacy
*Finding areas of convergence and identifying gaps is a must for risk management and compliance
*Most laws require orgs to facilitate DS (data subject) access requests (DSAR), rights to deletion, correction and portability
*Schrems II decision of EU Court of Justice related to data transfer from EU = companies must conduct transfer impact assessments, deploy new standard contractual clauses and rely on alternative transfer mechanisms such as binding corporate rules and derogations.
*Orgs with mature privacy ops not only have full teams of privacy professionals, but they also have them embedded in various business ops and admin depts.
*Privacy program management is a foundational component in modern business.