Learn why every Facebook advertiser is at risk of CCPA non-compliance, and how should they respond

Products
- Features
  
  View
  
  Featured Systems
  
  IaaS
  
  Cloud Data Platforms
  
  SaaS
  
  Self-Hosted
  
  Asset and Data Discovery
  
  Data Classification
  
  Sensitive Data Catalog
  
  People Data Graph
  
  Data Risk Managment
  
  Amazon AWS
  
  Microsoft Azure
  
  Google Cloud
  
  Oracle Cloud
  
  Snowflake
  
  Databricks
  
  M365 Suite
  
  Salesforce
  
  Box
  
  Google Workspace (formerly Suite)
  
  Slack
  
  Workday
  
  Github
  
  Oracle
  
  Jira
  
  Dropbox
  
  SAP Successfactors
  
  Servicenow
  
  Zendesk
  
  Oracle
  
  SAP
  
  Microsoft
  
  IBM
  
  File Storage
  
  Apache Hive
  
  Apache Spark SQL
  
  Cassandra
  
  Couchbase
  
  Find data assets, and discover personal and sensitive data in structured and unstructured data systems, across on-premises and multi-cloud.
  
  Key Features
  
  Catalog all data assets
  
  Support for 200+ apps and data asset types
  
  100s of out-of-box detectors
  
  Out-of-the-box detection of data attributes specific to 20+ categories across industries
  
  Extensive localization support including N.America, EU, LATAM and Asia
  
  Identify regulated attributes
  
  See how it works
  
  Classify & label data to ensure appropriate security controls are enabled on most sensitive data in your organization
  
  Key Features
  
  Automatic data classification to detect sensitive data such as medical/financial documents and more
  
  Auto data labelling
  
  Purpose based labeling
  
  Metadata tags
  
  See how it works
  
  Collect, organize, enrich and build a data catalog to address privacy, security and governance solutions
  
  Key Features
  
  Discover Data Assets
  
  Searchable data catalog
  
  Discover privacy and security metadata
  
  See how it works
  
  Connect to structured and unstructured data sources and automatically discover and build a relationship map between personal data and its owner.
  
  Key Features
  
  Secure creation of PI graph while preventing PI sprawl
  
  Derive insights about identities, PI data, residencies and data location
  
  Gain valuable insights about compliance risk for PI data across systems
  
  Enable swift and accurate DSR fulfillment
  
  Enable swift and accurate breach notification
  
  Gain insights about PI data using natural language conversational interface
  
  See how it works
  
  Assess risk scores for every data asset, asset location, or personal data category
  
  Key Features
  
  Identify data risk hotspots
  
  Customize and tune risk scores
  
  Eliminate blind spots for data risk
  
  See how it works
  
  AWS S3
  
  Amazon RDS (MySQL, PostgreSQL, Oracle, SQL Server, and MariaDB)
  
  Amazon Redshift
  
  Amazon Athena
  
  Amazon Aurora Postgres
  
  Amazon DynamoDB
  
  Amazon EMR Hive
  
  Amazon Elasticsearch
  
  And More
  
  Azure Files
  
  Azure Blobs
  
  Azure Cosmos DB
  
  Azure Data Warehouse
  
  Azure SQL Database
  
  Azure Table Storage
  
  And More
  
  Google Cloud Storage
  
  Google BigQuery
  
  Google Cloud Spanner
  
  Google Cloud SQL
  
  Google Cloud Datastore
  
  Google Cloud Firestore
  
  And More
  
  OCI Object Storage
  
  OCI Autonomous Data Warehouse Cloud
  
  OCI Database Cloud Service
  
  OCI DB - Bare metal
  
  OCI DB - VMs
  
  OCI MySQL
  
  OCI NoSQL
  
  And More
  
  Auto discover personal data in Snowflake and enforce access governance
  
  Key Features
  
  Deep data discovery - auto detect all personal and sensitive data in Snowflake
  
  Detect 120+ personal data attributes across various industries, regions and regulations
  
  Reveal all personal data records in schemas, tables and columns
  
  Assess data risk in Snowflake based on personal data attributes, data residencies, & Snowflake instance location
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Visibility and enforcement of access governance
  
  See how it works
  
  Auto discover personal data in Snowflake and enforce access governance
  
  Key Features
  
  Deep data discovery - auto detect all personal and sensitive data in Databricks
  
  Detect 120+ personal data attributes across various industries, regions and regulations
  
  Reveal all personal data records in delta lake
  
  Assess data risk in Databricks based on personal data attributes, data residencies, & databricks instance location
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Visibility and enforcement of access governance
  
  OneDrive
  
  Sharepoint
  
  Outlook
  
  O365 Calendar
  
  Dynamics 365
  
  Dynamics CRM
  
  And More
  
  Salesforce Sales Cloud
  
  Salesforce Marketing Cloud
  
  And More
  
  Discover, classify, manage and protect sensitive data in Box. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Gmail
  
  Google Drive
  
  Google Calendar
  
  Google Analytics
  
  And More
  
  Discover, classify, manage and protect sensitive data in Slack. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Discover, classify, manage and protect sensitive data in Workday. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Discover, classify, manage and protect sensitive data in Github. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights
  
  ERP Cloud
  
  Sales Cloud
  
  Eloqua
  
  And More
  
  Discover, classify, manage and protect sensitive data in Jira. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Discover, classify, manage and protect sensitive data in Dropbox. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Discover, classify, manage and protect sensitive data in SAP Successfactors. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Discover, classify, manage and protect sensitive data in Servicenow. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Discover, classify, manage and protect sensitive data in Zendesk. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Oracle Database
  
  Oracle Data Warehouse
  
  And More
  
  ECC
  
  HANA
  
  And More
  
  SQL Server
  
  Exchange Server
  
  Sharepoint Server
  
  And More
  
  DB2
  
  DB2 zOS
  
  Domino
  
  Informix
  
  And More
  
  NFS
  
  SMB
  
  CIFS
  
  And More
  
  Discover, classify, manage and protect sensitive data in Apache Hive. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Discover, classify, manage and protect sensitive data in Apache Spark SQL. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Discover, classify, manage and protect sensitive data in Cassandra. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
  
  Discover, classify, manage and protect sensitive data in Couchbase. Automate data subject rights fulfillment and maintain compliance with regulations such as GDPR, CCPA, LGPD, PCI and more.
  
  Key Features
  
  Deep data discovery
  
  Auto classification of PII and PHI
  
  Enhanced data protection and handling
  
  Automated data subject rights fulfillment
- PrivacyOps Modules
  
  View
  
  Use Cases
  
  View
  
  Data Mapping Automation
  
  DSR Robotic Automation
  
  People Data Graph
  
  Assessment Automation
  
  Vendor Risk Assessment
  
  Cookie Consent
  
  Universal Consent
  
  Breach Management
  
  Privacy Notice Management
  
  GDPR Compliance
  
  CCPA Compliance
  
  LGPD Compliance
  
  Privacy by Design
  
  More Solutions
  
  Maintain your Data Catalog with continuous automated updates
  
  Key Features
  
  Maintain a central repository for all data assets, data processing and vendor records
  
  Initiate PIAs and DPIAs, and dynamically update them based on changes to your data
  
  Automatically discover new data and dynamically update your data catalog, trigger new assessments and update your risk register
  
  Easily monitor cross border traffic and other key data patterns and exchanges with dynamic visual data maps
  
  Generate Records of Processing Activities, such as Article 30 reports
  
  Gain real-time insights into risks associated with your data and processing activities
  
  See how it works Try
  
  Automate data subject rights request fulfillment and maintain proof of compliance
  
  Key Features
  
  Customizable DSR intake forms
  
  Identity verification to protect against identity fraud and PI theft
  
  Robotic automation for timely and efficient fulfillment of data subject requests
  
  Automated linking of identity to personal data using AI
  
  Built-in collaboration to prevent data sprawl
  
  Comprehensive audit records to meet regulatory requirements
  
  See how it works Try
  
  Connect to structured and unstructured data sources and automatically discover and build a relationship map between personal data and its owner.
  
  Key Features
  
  Secure creation of PI graph while preventing PI sprawl
  
  Derive insights about identities, PI data, residencies and data location
  
  Gain valuable insights about compliance risk for PI data across systems
  
  Enable swift and accurate DSR fulfillment
  
  Enable swift and accurate breach notification
  
  Gain insights about PI data using natural language conversational interface
  
  See how it works
  
  Audit once and comply with many regulations. Collaborate and track all internal assessments in one place.
  
  Key Features
  
  Comprehensive knowledgebase of global regulatory requirements
  
  Single repository for all internal responses and documents
  
  Easy sharing of completed assessments with customers and partners
  
  Audit once and comply with many regulatory requirements
  
  Collaborate with subject matter experts across functions on one privacy platform
  
  Gain compliance insights, recommendations and automate follow-ups with internal parties.
  
  See how it works Try
  
  Automation of privacy assessment collection from third parties, collaboration among stakeholders, follow-ups and compliance analytics.
  
  Key Features
  
  Comprehensive knowledgebase of global regulatory requirements
  
  Single repository for all 3rd party responses and documents
  
  Independent, privacy risk ratings of 3rd parties
  
  Audit once and comply with many regulatory requirements
  
  Collaborate with subject matter experts across functions on one privacy platform
  
  Gain compliance insights, recommendations and automate follow-ups with 3rd parties.
  
  See how it works Try
  
  Automate global cookie consent compliance.
  
  Key Features
  
  Track 1st and 3rd party code that runs on websites through continuous website scanning
  
  Automatically classify cookies for accurate consent notification
  
  Comply with global regulatory and compliance requirements such as GDPR, CCPA, ePrivacy Directive, IAB TCF 2.0 and more
  
  Maintain comprehensive records of consent for audit and reporting
  
  Customize the style, look and feel to align with your brand
  
  Honor opt-out requests by automatically blocking non-essential cookies without any additional code
  
  See how it works Try
  
  Simplify and automate universal consent management.
  
  Key Features
  
  Customizable endpoints based on branding, functionality and regulatory requirements
  
  Consent orchestration across an extensive array of applications
  
  Easily honor consent revocations from offline or non-primary channels
  
  Deploy a configurable consumer preference center
  
  Build configurable workflows to dynamically sync consent status across systems
  
  Maintain comprehensive consent records for audit and reporting
  
  See how it works Try
  
  Automate the incident response process by gathering incident details, identifying the scope and optimizing notifications to comply with global privacy regulations.
  
  Key Features
  
  Easy and intuitive portal to report and collaborate on incidents
  
  Breach management workbench to automate incident management and data breach notifications
  
  Automatically discover insights about impacted users & their data
  
  Use jurisdiction research data to make notification decisions
  
  Track remediation activities and maintain detailed audit trails
  
  Make timely notifications using pre-built templates to reduce risk
  
  See how it works
  
  Keeping privacy notices up-to-date made easy
  
  Key Features
  
  Publish privacy notices in minutes using pre-built templates
  
  Centralize management by tracking and monitoring privacy notices for all your environments
  
  Reduce risk of privacy violations
  
  Accelerate periodic review process
  
  Native integration with privacy-ops platform keeps notices up-to-date
  
  See how it works
  
  Operationalize GDPR compliance with the most comprehensive PrivacyOps platform
  
  Key Features
  
  Build customized, branded web forms to accept verified data subject rights requests
  
  Automate secure data subject request handling
  
  Continuously scan and monitor data against non-compliance to subject rights, legal basis for data processing, data residency or security controls
  
  Surface new PD types, categories and data flow risks on an ongoing basis
  
  Maintain an accurate data catalog, map data flows and generate article 30 reports
  
  Meet cookie compliance requirements
  
  Monitor and track consent to ensure data is processed legally
  
  Assess GDPR readiness using a collaborative, multi-regulation assessment system
  
  Track, monitor and manage privacy and security readiness for all vendors from a single interface
  
  See how it works Try
  
  Operationalize CCPA compliance with the most comprehensive PrivacyOps platform
  
  Key Features
  
  Build customized, branded web forms to accept verified data subject rights requests
  
  Automate secure data subject request handling
  
  Continuously scan and monitor data against non-compliance to subject rights, legal basis for data processing, data residency or security controls
  
  Surface new PD types, categories and data flow risks on an ongoing basis
  
  Maintain an accurate data catalog, map data flows and generate article 30 reports
  
  Meet cookie compliance requirements
  
  Monitor and track consent to ensure data is processed legally
  
  Assess GDPR readiness using a collaborative, multi-regulation assessment system
  
  Track, monitor and manage privacy and security readiness for all vendors from a single interface
  
  See how it works Try
  
  Revolutionize LGPD compliance through PrivacyOps
  
  Key Features
  
  Build customized, branded web forms to accept verified data subject rights requests
  
  Automate secure data subject request handling
  
  Continuously scan and monitor data against non-compliance to subject rights, legal basis for data processing, data residency or security controls
  
  Surface new PD types, categories and data flow risks on an ongoing basis
  
  Maintain an accurate data catalog, map data flows and generate article 30 reports
  
  Meet cookie compliance requirements
  
  Monitor and track consent to ensure data is processed legally
  
  Assess GDPR readiness using a collaborative, multi-regulation assessment system
  
  Track, monitor and manage privacy and security readiness for all vendors from a single interface
  
  See how it works Try
  
  Enable privacy by design through the AI driven PrivacyOps platform
  
  Key Features
  
  Continuously scan and monitor data against non-compliance to subject rights, legal basis for data processing, data residency or security controls - make privacy proactive not reactive
  
  PIA framework, Data subject rights management, consent management framework and privacy notices ensure that privacy is enabled default
  
  Privacy portals, data mapping automation and PIA framework ensure that privacy is embedded into design
  
  PIA framework, privacy notices and consent and subject rights management helps make any program a positive sum initiative
  
  Classification, risk monitoring and policy based alerts and remediation offer end-to-end security while processing personal data
  
  Privacy notices and consent management framework offer visibility and transparency to users and respect users rights and preferences
  
  See how it works Try
  
  CCPA
  
  GDPR
  
  LGPD
  
  NZPA
  
  PDPA
  
  POPIA
  
  DIFC
  
  APPs
  
  PDPA
  
  PIPEDA
  
  Schrems II
  
  ADHICS
  
  ECL
  
  LPPD
  
  PDPB
  
  PIPL
  
  And More
- Features
  
  View
  
  Discover
  
  Classify & Label
  
  Monitor
  
  Protect
  
  Investigate
  
  Comply
  
  Discover data assets, detect & catalog sensitive data in it
  
  Key Features
  
  100s of out-of-box detectors
  
  Support for 200+ apps and data asset types
  
  Regional data type coverage
  
  Searchable sensitive data catalog
  
  Industry specific coverage
  
  Regulation specific coverage
  
  See how it works
  
  Classify and label data to ensure appropriate security controls
  
  Key Features
  
  Auto data classification
  
  Auto data labeling
  
  Purpose based labeling
  
  Metadata tags
  
  See how it works
  
  Monitor data security posture and identify external and internals risks to data security
  
  Key Features
  
  Detect data exposure risks
  
  Identify high risk data assets
  
  Customizable risk score calculation
  
  Data risk visualization & attribution
  
  See how it works
  
  Policy based alerts and remediations to protect data from external and internal threats
  
  Key Features
  
  Policy driven proactive alerts and remediation of data exposures
  
  Policy driven access controls
  
  Easily configure policies using rules
  
  See how it works
  
  Investigate data security issues and take remediation actions
  
  Key Features
  
  Investigate root cause of data security issues
  
  Policy creation from incidents
  
  Assign and track incident closures
  
  Comply with global regulations related to data security & privacy
  
  Key Features
  
  Out-of-box library of controls for important regulations
  
  Extensible framework to add new controls and rules
  
  Evidence collection and mapping
  
  Compliance reporting
Request a demo
Solutions
Technologies

View

Regulations

View

Snowflake

AWS S3

Microsoft 365

Cloud Data Migration

Box

Salesforce

CCPA

GDPR

LGPD

NZPA

PDPA

POPIA

DIFC

APPs

PDPA

PIPEDA

Schrems II

ADHICS

ECL

LPPD

PDPB

PIPL

Snowflake is a cloud based data warehouse that allows organizations to run large scale data analytics projects to uncover business insights, run or train machine learning models, and modernize their data infrastructure.

Key Features

Discover personal data

Reveal all personal data records

Identify Data Risk

Find data owners & fulfill DSRs in a timely manner

Protect PII and PHI

Visibility and enforcement of access governance

See how it works

The Amazon S3 (Simple Storage Service) is a web-service which allows for scalable storage solutions for data archival, backup, and recovery purposes.

Key Features

Discover personal data

Auto detect sensitive files and classify them

Catalog & search unstructured data

Identify Data Risk

Find data owners & fulfill DSRs in a timely manner

Review and revoke excessive privileges

See how it works

Microsoft O365 is the ubiquitous productivity suite for every business worker. Users rely on Office products such as OneDrive and SharePoint to collaborate with their co-workers.

Key Features

Discover personal data

Auto detect sensitive files and classify them

Catalog & search unstructured data

Identify Data Risk

Find data owners & fulfill DSRs in a timely manner

See how it works

Organizations want to migrate their on-premises data to cloud data stores to take advantage of scale and flexibility while reducing operational cost of managing on-premises infrastructure. However, due to privacy regulations such as GDPR, CCPA administrators have to ensure that data is migrated in compliance with these laws.

Key Features

Discover personal data

Catalog structured and unstructured data

Classify and label data

Protect PII and PHI

Update Data Maps & Article 30 reports

See how it works

Protecting sensitive content is a priority for all organizations, however, due to volume of sensitive content and

Key Features

Discover all your sensitive data

Auto detect & classify sensitive content

Prevent data leaks and reduce accidental breaches

Monitor data risk

Comply with GDPR/CCPA by fulfilling DSRs in a timely manner

See how it works

While data aids in business decision making, global privacy regulations such as GDPR, CPRA require organization to identify personal & sensitive data & use only for its intended purpose and implement adequate protection.

Key Features

Discover sensitive data

Reveal all sensitive data records

Identify Data Risk

Find data owners & fulfill DSRs in a timely manner

Protect PII and PHI

See how it works

The California Consumer Privacy Act (CCPA) was signed into law on June 28, 2018 and is scheduled to come into effect on January 01, 2020. Often compared to GDPR, CCPA protects consumers from mismanagement of their personal data and gives the consumer control over what data is collected, processed, shared or sold.

Key Features

Automate consumer data access request handling

Secure fulfillment of data access requests

Fulfill CCPA 'do not sell' requests

Continuous monitoring and tracking

Automate PI data linking

Enable opt-out mechanisms

Monitor and track consent

Assess CCPA readiness

Assess third parties

Map data flows

See how it works

The EU General Data Protection Regulation (GDPR) came into effect on May 25, 2018 and changed the global privacy landscape. It has broadened the definition of processing activities and personal data, impacting companies worldwide, and has tightened the rules to obtain consent before processing information.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate objection and processing restriction requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate PI data linking

Meet cookie compliance

Monitor and track consent

Assess GDPR readiness

Map data flows and generate article 30 reports

Manage vendor risk

See how it works

The Lei Geral de Proteção de Dados (LGPD) is modeled with similarities to the General European Data Protection Regulation (GDPR) and contains sixty-five articles. It was approved on August 14, 2018 and its validity has undergone several changes, the last relevant fact being MPV 959. LGPD is in effect since September 18, 2020. The sanctions by the ANPD (Brazilian Data Protection Authority) were postponed to August 2021. The LGPD allows people have more rights over their data and expects organizations to comply with their regulations or face heavy penalties or fines.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess LGPD readiness

Map data flows and generate reports

Manage vendor risk

See how it works

The government of New Zealand has recently replaced its long-existing Privacy Act of 1993 with a modernized version, the Privacy Act 2020. The New Zealand Privacy Act 2020 (NZPA) will take effect from December 1, 2020.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess NZPA readiness

Breach Response Notification

Manage vendor risk

See how it works

The Personal Data Protection Act, B.E. 2562 (2019) ('PDPA') is Thailand's first consolidated data protection law, which was published in the Thai Government Gazette on 27 May 2019. This law was said to go into effect on 27 May 2020. However, in May 2020, the Thai Cabinet through a Royal Decree has deferred the enforcement of certain data protection provisions of the PDPA until 31 May 2021.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess PDPA readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

In order to protect the data of individuals in South Africa, Parliament assented to the Protection of Personal Information Act (POPIA) on 19th November 2013. The commencement date of section 1, Part A of Chapter 5, section 112 and section 113 was 11 April 2014. The commencement date of the remaining sections (excluding section 110 and 114(4)) was 1st July 2020. As per the Regulator’s Operational Readiness Plan the Regulator will be able to take enforcement actions for the violation of POPIA by July 1st 2021.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess POPIA readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

The DIFC Data Protection Law, 2020 lays down regulations regarding the collection, disclosure and processing of personal data in the DIFC, a special economic zone in Dubai. It also gives rights to individuals whom the personal data relates to and provides power to the Commissioner of Data Protection to enforce the law, enact regulations and approve industry-wide Codes of Conduct.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess DIFC readiness

Manage vendor risk

Breach Response Notification

See how it works

The Australia Privacy Act 1988 (Privacy Act) was enacted to protect the privacy of data subjects and regulate how Australian agencies and organizations with an annual turnover of more than $3 million handle their customers’ personal information.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess Australia PA readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

Singapore’s Personal Data Protection Act (PDPA) comprises various provisions governing the collection, disclosure, use, and care of personal data. It recognizes the rights of individuals to have more control over their personal data and the needs of organizations to collect, use, or disclose personal data for legitimate and reasonable purposes.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate the processing of rectification requests

Automate objection and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess PDPA readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

On April 13, 2000, the Personal Information Protection and Electronic Documents Act (PIPEDA) received Royal Assent. It came into force in stages, beginning on January 1, 2001. PIPEDA came fully into effect on January 1, 2004. The legislation applies to organizations that collect, use or disclose personal information in the course of commercial activities.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess PIPEDA readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

After the invalidation of Privacy Shield, many companies are relying on the SCCs in order to continue transferring data of EU citizens to companies based in countries who are not deemed adequate for data transfer.

After the CJEU judgement, it is clear that these companies have to conduct Risk Assessments with the data recipients in these countries in order to ensure they have enough controls to mitigate any potential data or regulatory risk.

Key Features

Conduct EU-US Data Transfer Risk Assessments based on Schrems II decision

Identify and review data transfers from the European Union

Manage and remediate discovered vendor risks

See how it works

On 2nd March, 2019, the Department of Health—Abu Dhabi (DoH), launched the Abu Dhabi Healthcare Information and Cyber Security (ADHICS) Standard. This is the first standard that aims to provide healthcare professionals and entities a comprehensive guide to the regulation of healthcare data in Abu Dhabi. This law ensures the highest levels of privacy and security of patients’ data, in line with international standards, is maintained.

Key Features

Automate health professionals’ data access request handling

Automated discovery, mapping, cataloging and labeling of data assets

Secure fulfillment of data access requests

Continuous monitoring and tracking

Automate People Data Graph

Assess ADHICS readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

On January 31, 2020, the government of Saudi Arabia issued the Executive Regulations to the Saudi E-Commerce Law 2019 (“ECL”) that was in effect since October 2019. The Executive Regulations together with the ECL (“Law”) aim to protect consumers’ personal data by requiring organizations to take appropriate technical and administrative measures.

Key Features

Automate processing of rectification requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Monitor and track consent

Assess ECL readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

Turkey was one of the first countries to start the trend of legislating data protection. Turkey published “Law on the Protection of Personal Data No. 6698 (LPPD) covering personal data protection on April 07, 2016.” The LPPD is based on the European Union Data Protection Directive 95/46/EC and has several similarities with the GDPR. It aims to give data subjects’ control over their personal data and outlines obligations that organizations and individuals dealing with personal data must comply with. The LPPD has also provided comprehensive guidelines for the transfer of personal data to the third parties.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess LPPD readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

In December 2019, India, following several other countries' footsteps on the privacy laws' developments, introduced the Personal Data Protection Bill (PDPB) to regulate the processing, collection, and storage of personal data.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess PDPB readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

On 13 October 2020, the National People's Congress of the Republic of China submitted the long awaited draft of the Personal Information Protection Law (Draft PIPL) to the Standing Committee meeting for preliminary review. This draft was officially released for the public consultation on 21 October, 2020. The consultation period will last until 19 November 2020.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess China’s Draft PIPL readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works
Request a demo
Resources

PrivacyOps

Learn all about the PrivacyOps framework

View

Blog

Read through our articles written by industry experts

View

Videos

Learning resource for anyone that wants to learn about the PrivacyOps framework

View

Collateral

Product brochures, Solution briefs, Flyers and more

View

Knowledge Center

All about the data privacy landscape and its impact on organizations

View

Request a demo
Company

About Us

Learn all about Securiti, our mission and history

View

Partner Program

Join our PrivacyOps Partners Program

View

Contact Us

If you want to schedule a demo, or looking for more details, feel free to contact us!

View

Collateral

Product brochures, Solution briefs, Flyers and more.

View

News Coverage

Read all about Securiti and the PrivacyOps framework on the news

View

Press Releases

Find all our latest press releases discussing news and new features being introduced

View

Request a demo

Summary

July 1 - July 31 (With option to extend until Oct 20)

What happened: Facebook turns ON a feature to limit processing California residents data by default
What was the impact: Ensured all Facebook customers (advertisers and publishers) are compliant with CCPA, but limited their ability to re-target California residents
What are the consequences: Organizations are CCPA compliant, but their marketing performance suffers since there is no re-targeting for any California residents
Optimal solution: Organizations should identify California residents and ask/honor their consent before sharing their personal information with Facebook for further processing

After Oct 20

What happened: Facebook turns OFF the feature that limits processing of California residents personal data
What was the impact: Advertisers and publishers potentially at risk of processing all customers data (including California residents) without consent
What are the consequences: If no action is taken, organizations are not compliant with CCPA and potentially at risk of fines
Optimal solution: Organizations should identify California residents and ask/honor their consent before sharing their personal information with Facebook for further processing

Earlier in the year, Facebook had launched a feature called Limited Data Use (LDU) to help their customers, advertisers & publishers, comply with California Consumer Privacy Act (CCPA) compliance. You can learn all about LDU here.

In a nutshell, Facebook used LDU to limit or block processing California residents personal data to allow businesses time to comply with CCPA.

Under CCPA, which started enforcement July 1st, 2020 when consumers exercise the ‘Do Not Sell’ request, the companies are legally required to honor their consent and stop selling or processing consumer’s existing and collected personal data.

For-profit businesses that met one of the following criterion were required to comply with CCPA:

Greater than $25m in gross annual revenue
Obtains or shares personal information of at least 50,000 California residents, households, and/or devices per year
At least 50% of their annual revenue is generated from selling California residents’ personal information

To help its customers comply with CCPA, Facebook automatically enabled LDU for all Facebook business accounts and personal information shared through the following Facebook products.

Facebook Pixel
Server-Side API
App Events API
Offline Conversions

With this feature ON businesses were compliant with CCPA. Facebook would auto-identify all California residents and ensure their data isn’t being processed. Businesses had the option to turn it off if they weren’t serving California residents.

After October 20, 2020 Facebook turned this feature OFF by default, putting the onus on the business to identify California residents, and inform Facebook not to process their data, if they chose to opt-out.

Businesses can still use LDU, but if they use it broadly it would limit their ability to retarget users impacting marketing performance. Arguably, since CCPA does not require publishers to obtain opt-in consent of users but based on an opt-out consent regime, businesses can enable the LDU flag for only Californian residents who opt-out of sharing their personal information.

With this balanced approach, advertisers can reach a larger segment of the California residents population without being non-compliant with CCPA.

How can we help?

SECURITI.ai offers Cookie consent and Universal consent products that can be deployed within days to help businesses comply with CCPA. We help you track where visitors on your website come from, and for California residents manage user consent by asking and collecting opt-out requests on your websites. These opt-out notices are used to notify Facebook that user data shouldn’t be processed. Advertisers and publishers can create an audit trail to demonstrate compliance. In this way, advertisers and publishers can ensure they are always compliant with CCPA.

Get started within minutes by using our free trial or contact us to learn more.

Our Videos