Automated Data Subject Rights (DSR) Requests for Developers

Features

First Party Consent

A next generation consent & preference management solution that captures, reconciles, and engages systems across your Martech stack.

View

Cookie Consent

A solution that evolves with you as the regulatory and digital landscape changes around the world.

View

DSR Automation

A solution to programmatically discover, extract, delete and correct user’s data across hundreds of applications.

View

Live Data Mapping

Streamline information gathering, dynamically discover assets and data for continuous, programmatic RoPA compliance.

View

Privacy Notice Management

The only privacy policy and notice builder that keeps your notices updated in real-time.

View

Zero-Code Workflow Automation

Seamlessly automate actions across your company's Privacy, IT Operations and DevOps workflows

View

Request a demo
Regulations
Regulations

View

All Regulations

CCPA

CPRA

GDPR

Brazil’s LGPD

China

UAE

NZPA

Thailand’s PDPA

South Africa’s POPIA

Singapore’s PDPA

Canada

Australia

Schrems II

Saudi Arabia ECL

Turkey’s LPPD

Indian DPB

Irish DPA

Hong Kong’s PDPO

Philippines DPA

South Korean PIPA

Japan APPI

Qatar DPL

Bahrain PDPL

Virginia Consumer Data Protection Act

Colorado Privacy Act

Saudi PDPL

Uganda DPPA

Ghana’s DPA

Kenya’s DPA

Malaysia’s PDPA

Indonesia

Oman

Kuwait DPPR

Sri Lanka’s PDPA

Russian Federal Law

Germany

UK

e-Privacy Directive

NY DFS Cybersecurity Requirements

The EU Data Governance Act

Securiti enables organizations to meet multiple regulations around the world and helps with compliance requirements through AI-driven PI data discovery, DSR automation, documented accountability, enhanced visibility into data processing activities and AI-driven process automation.

Securiti is a complete PrivacyOps Solution.
View all solutions

The California Consumer Privacy Act (CCPA) was signed into law on June 28, 2018 and is scheduled to come into effect on January 01, 2020. Often compared to GDPR, CCPA protects consumers from mismanagement of their personal data and gives the consumer control over what data is collected, processed, shared or sold.

Key Features

Automate consumer data access request handling

Secure fulfillment of data access requests

Fulfill CCPA 'do not sell' requests

Continuous monitoring and tracking

Automate PI data linking

Enable opt-out mechanisms

Monitor and track consent

Assess CCPA readiness

Assess third parties

Map data flows

See how it works

The California Privacy Rights Act (CPRA) will take effect from January 1, 2023, and will apply to personal information collected on or after January 1, 2022. Enforcement of the CPRA will start six months later (July 1, 2023). The CPRA builds upon the CCPA, strengthening user privacy for California residents.

Key Features

Assess CPRA readiness

Map data to discover sensitive personal information and catalog it

Automate data classification & labeling

Automate data subject rights requests for a seamless customer experience

Monitor and track consent

Enable Opt-out Mechanisms

Continuous monitoring and tracking

Automate People Data Graph

Manage vendor risk

Privacy Policy & Notice Management

See how it works

The EU General Data Protection Regulation (GDPR) came into effect on May 25, 2018 and changed the global privacy landscape. It has broadened the definition of processing activities and personal data, impacting companies worldwide, and has tightened the rules to obtain consent before processing information.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate objection and processing restriction requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate PI data linking

Meet cookie compliance

Monitor and track consent

Assess GDPR readiness

Map data flows and generate article 30 reports

Manage vendor risk

See how it works

The Lei Geral de Proteção de Dados (LGPD) is modeled with similarities to the General European Data Protection Regulation (GDPR) and contains sixty-five articles. It was approved on August 14, 2018 and its validity has undergone several changes, the last relevant fact being MPV 959. LGPD is in effect since September 18, 2020. The sanctions by the ANPD (Brazilian Data Protection Authority) were postponed to August 2021. The LGPD allows people have more rights over their data and expects organizations to comply with their regulations or face heavy penalties or fines.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess LGPD readiness

Map data flows and generate reports

Manage vendor risk

See how it works

China has complex data protection and data security regime, however, the following are three main laws that primarily cover China’s data protection and data security regulatory framework. These laws are:

Frameworks

Cybersecurity Law - CSL

Data Securitiy Law - DSL

Personal Information Protection Law - PIPL

UAE have number of laws in place that govern privacy as well as data security in the UAE. Some of those includes:

Frameworks

UAE Personal Data Protection Law

DIFC Data Protection Law

Abu Dhabi's ADHICS

Abu Dhabi's ADGM DPR

UAE TRA’s Consumer Protection Regulations

CBUAE SVF Regulation

The government of New Zealand has recently replaced its long-existing Privacy Act of 1993 with a modernized version, the Privacy Act 2020. The New Zealand Privacy Act 2020 (NZPA) will take effect from December 1, 2020.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess NZPA readiness

Breach Response Notification

Manage vendor risk

See how it works

The Personal Data Protection Act, B.E. 2562 (2019) ('PDPA') is Thailand's first consolidated data protection law, which was published in the Thai Government Gazette on 27 May 2019. This law was said to go into effect on 27 May 2020. However, in May 2020, the Thai Cabinet through a Royal Decree has deferred the enforcement of certain data protection provisions of the PDPA until 31 May 2021.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess PDPA readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

In order to protect the data of individuals in South Africa, Parliament assented to the Protection of Personal Information Act (POPIA) on 19th November 2013. The commencement date of section 1, Part A of Chapter 5, section 112 and section 113 was 11 April 2014. The commencement date of the remaining sections (excluding section 110 and 114(4)) was 1st July 2020. As per the Regulator’s Operational Readiness Plan the Regulator will be able to take enforcement actions for the violation of POPIA by July 1st 2021.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess POPIA readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

Singapore’s Personal Data Protection Act (PDPA) comprises various provisions governing the collection, disclosure, use, and care of personal data. It recognizes the rights of individuals to have more control over their personal data and the needs of organizations to collect, use, or disclose personal data for legitimate and reasonable purposes.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access and port requests

Automate the processing of rectification requests

Automate objection and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess PDPA readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

The Canadian data laws aim to give consumers control over their data and promote greater transparency about how organizations use data containing personal identifiers.

Frameworks

Canada's PIPEDA

Quebec Privacy Act

The Australian data laws aim to give consumers control over their data and promote greater transparency about how organizations use data containing personal identifiers.

Frameworks

APRA Prudential Standard CPS 234 Information Security

The Australia Privacy Act & Australian Privacy Principles (APPs)

After the invalidation of Privacy Shield, many companies are relying on the SCCs in order to continue transferring data of EU citizens to companies based in countries who are not deemed adequate for data transfer.

After the CJEU judgement, it is clear that these companies have to conduct Risk Assessments with the data recipients in these countries in order to ensure they have enough controls to mitigate any potential data or regulatory risk.

Key Features

Conduct EU-US Data Transfer Risk Assessments based on Schrems II decision

Identify and review data transfers from the European Union

Manage and remediate discovered vendor risks

See how it works

On January 31, 2020, the government of Saudi Arabia issued the Executive Regulations to the Saudi E-Commerce Law 2019 (“ECL”) that was in effect since October 2019. The Executive Regulations together with the ECL (“Law”) aim to protect consumers’ personal data by requiring organizations to take appropriate technical and administrative measures.

Key Features

Automate processing of rectification requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Monitor and track consent

Assess ECL readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

Turkey was one of the first countries to start the trend of legislating data protection. Turkey published “Law on the Protection of Personal Data No. 6698 (LPPD) covering personal data protection on April 07, 2016.” The LPPD is based on the European Union Data Protection Directive 95/46/EC and has several similarities with the GDPR. It aims to give data subjects’ control over their personal data and outlines obligations that organizations and individuals dealing with personal data must comply with. The LPPD has also provided comprehensive guidelines for the transfer of personal data to the third parties.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess LPPD readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

In December 2019, India, following several other countries' footsteps on the privacy laws' developments, introduced the Personal Data Protection Bill (PDPB) to regulate the processing, collection, and storage of personal data. However, in November 2021, the bill’s name was amended to now be called the Data Protection Bill 2021 (DPB).

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess DPB readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

The Irish Data Protection Act, 2018 (Irish DPA) implements the General Data Protection Regulation (GDPR) and transposes the European Union Law Enforcement Directive in Ireland. Since it incorporates most of the provisions from the GDPR and the Law Enforcement Directive with limited additions and deletions as per the national law, it is considered to be the principal data protection legislation in Ireland.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate object and restriction of processing requests

Automate erasure requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess DPA readiness

Map data flows

Manage vendor risk

See how it works

The Personal Data (Privacy) Ordinance (Cap. 486) as amended in 2012 (the “PDPO) is the primary legislation in Hong Kong which was enacted to protect the privacy of individuals’ personal data, and regulate the collection, holding, processing, disclosure, or use of personal data by the organizations.. The Data Protection Principles ( the “DPPs or DPP ''), which are contained in Schedule 1 to the PDPO, outline how entities should collect, handle, disclose, and use personal data.

Key Features

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess PDPO readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

In 2012, the Philippines passed the comprehensive privacy law, Data Privacy Act 2012 Republic Act. No, 10173 (the "DPA"). The DPA recognizes the rights of individuals to have more control over their personal data while ensuring a free flow of information to promote innovation and growth.

Key Features

Automate data subject access request handling

Secure fulfillment of data access

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess DPA readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

South Korea has a general law and several special laws that cover data protection and individuals' privacy. South Korea's data protection regime is considered one of the strictest data protection regimes owing to its notification requirements, opt-in consent, extensive data subject rights, mandatory data breach notifications, and heavy sanctions in case of non-compliance.

Key Features

Customize DSR Request Portal

Automate Data Subject Access Request Handling

Secure Fulfillment of Data Access

Automate Processing of Rectification Requests

Automate Erasure Requests

Automate Objection & Restriction of Processing Requests

Continuous Monitoring & Tracking

Automate People Data Graph

Meet Cookie Compliance

Monitor & Track Consent

Assess PIPA Readiness

Map Data Flows

Manage Vendor Risk

Breach Response Notification

See how it works

The Act on the Protection of Personal Information (the "APPI'') regulates personal related information and applies to any Personal Information Controller (the “PIC''), that is a person or entity providing personal related information for use in business in Japan. The APPI also applies to the foreign PICs which handle personal information of data subjects (“principals”) in Japan for the purpose of supplying goods or services to those persons.

Key Features

Customize DSR Request Portal

Automate Data Subject Access Request Handling

Secure Fulfillment of Data Access

Automate Processing of Rectification Requests

Automate Erasure Requests

Automate Objection & Restriction of Processing Requests

Continuous Monitoring & Tracking

Automate People Data Graph

Meet Cookie Compliance

Monitor & Track Consent

Assess Japan APPI readiness

Map Data Flows

Manage Vendor Risk

Breach Response Notification

See how it works

Qatar is the first gulf country that has passed a national data privacy law and has paved the way for all other gulf countries to follow suit. In 2016, Qatar enacted Law no. 13 Concerning Personal Data Protection (the “DPL”). Qatar became the first Gulf Cooperation Council (GCC) member state to issue an “European Style” applicable data protection law. The DPL establishes a certain degree of personal data protection, provides data subject rights, and prescribes the guidelines for organizations for the processing of personal data within Qatar.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate processing of rectification requests

Automate erasure requests

Automate objection and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess Qatar DPL readiness

Map data flows

Manage vendor risk

Breach Response Notification

See how it works

Bahrain has become a part of the countries that have enacted a data privacy regulation to protect the rights of their residents. On 12 July 2018, Bahrain drafted its law on data protection regulation, Law No. 30. This then went on to go into effect on the 1st of August 2019 as the Bahrain Personal Data Protection Law (PDPL) and supersedes all other laws. The PDPL recognizes the rights of individuals to have more control over their personal data and the needs of organizations to collect, use, or disclose personal data for legitimate purposes.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate processing of rectification requests

Automate erasure requests

Automate objection and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess Bahrain PDPL readiness

Map data flows

Manage vendor risk

Breach Response Notification

Privacy Policy & Notice Management

See how it works

After the Success of the California Consumer Privacy Act (CCPA) in California, Virginia is now following the same path. The Virginia Consumer Data Protection Act (VCDPA) has been passed and will go into effect on 1st of January 2023. This law is closely designed after the newer California Privacy Rights Act (CPRA) but with a few significant and important differences.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate processing of rectification requests

Automate erasure requests

Automate objection and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess Bahrain PDPL readiness

Map data flows

Manage vendor risk

Breach Response Notification

Privacy Policy & Notice Management

See how it works

After the VCDPA in Virginia, Colorado has closely followed suit and has passed their own comprehensive data privacy law to protect the personal data of the residents of Colorado.The Colorado Privacy Act (CPA) was signed into law on the 8th of July, 2021 and has been modelled closely after the VCDPA.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access

Automate processing of rectification requests

Automate erasure requests

Automate objection and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess Bahrain PDPL readiness

Map data flows

Manage vendor risk

Breach Response Notification

Privacy Policy & Notice Management

See how it works

Saudi Arabia has drafted a data privacy regulation to protect the personal data of individuals in Saudi Arabia. This law was approved by the Council of Ministers in Saudi Arabia and is named the Personal Data Protection Law (the “PDPL”).

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access requests

Automate processing of rectification requests

Automate erasure requests

Automate objection and restriction of processing requests

Continuous monitoring and tracking

Automate People Data Graph

Meet cookie compliance

Monitor and track consent

Assess Saudi PDPL readiness

.. and more

See how it works

Uganda’s Data Protection and Privacy Act 2019 seeks to protect Uganda’s citizens and their personal data by outlining and implementing rules for processing personal data and sensitive personal data by entities within or outside the country.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access requests

Automate processing of rectification requests

Automate erasure requests

Automate objection and restriction of processing requests

Monitor and track consent

Assess data protection and privacy act readiness

Map data flows/cross border data transfers

Meet cookie compliance

Automate breach response notification

Manage vendor risk

.. and more

See how it works

Ghana Data Protection Act 2012 establishes a comprehensive set of provisions governing the collection, processing, use, and protection of personal data by the data controller or data processor.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access requests

Automate processing of rectification requests

Automate erasure requests

Automate objection and restriction of processing requests

Monitor and track consent

Assess Ghana’s DPA 2012 readiness

Meet cookie compliance

Automate breach response notification

Manage vendor risk

.. and more

See how it works

Kenya’s Data Protection Act, 2019 (DPA) is based on the framework of the EU’s General Data Protection Regulation (GDPR), making it the third region in East Africa to have enacted and enforced data protection regulations.

Key Features

Customize a data subject rights request portal for seamless customer care

Automate data subject access request handling

Secure fulfillment of data access requests

Automate processing of rectification requests

Automate erasure requests

Automate objection and restriction of processing requests

Monitor and track consent

Assess data protection and privacy act readiness

Meet cookie compliance

Automate breach response notification

Manage vendor risk

.. and more

See how it works

Malaysia’s Personal Data Protection Act (PDPA) was passed by the Parliament of Malaysia on 2 June 2010. The PDPA sets out a complete cross-sectoral framework to protect the personal data of individuals with respect to commercial transactions.

Key Features

Automate data subject request handling

Secure fulfillment of data access requests

Automate the processing of rectification requests

Automate object and restriction of processing requests

Automate erasure/destroy/anonymize requests

Monitor and track consent

Continuous monitoring and tracking

Assess PDPA readiness

Map data flows and generate reports

Automate data breach response notifications

Manage vendor risk

Meet cookie compliance

Privacy policy and notice management

.. and more

See how it works

Although there is no comprehensive data protection law in Indonesia, however, there are several regulations that regulate the Indonesia's draft Personal Data Protection Bill (PDPB) & Personal Data Protection Regulations (PDP Regulations)

Frameworks

Indonesia's PDP Regulations

Indonesia's Draft Personal Data Protection Bill (PDPB)

Oman’s Personal Data Protection Law (Oman’s PDPL) has been published in the country’s official gazette, and it will come into force by February 9, 2023, one year after its issuance which was February 9, 2022. The law applies to any natural person’s personal data including but not limited to their name, location data, identification number, and health-related information.

Key Features

Customize a data subject rights request portal for seamless customer care

Assess Oman’s PDPL Readiness

Automate consumer data request handling

Secure fulfillment of data access requests

Automate the processing of rectification requests

Automate erasure/destroy/anonymize requests

Automate object and restriction of processing requests

Meet cookie compliance

Monitor and track consent

Automate data breach response notifications

Manage vendor risk

Map data flows (cross border data transfers) and generate RoPA reports

Privacy policy and notice management

... and more

See how it works

Kuwait’s Data Privacy Protection Regulations (DPPR) applies to all public and private Telecommunication Services Providers and related industry sectors who collect, process, and store personal data and user-related content in whole or in part of a data storage system, whether processed inside or outside the State of Kuwait.

Key Features

Assess Kuwait's DPPR Readiness

Automate consumer data request handling

Secure fulfillment of data access requests

Automate the processing of rectification requests

Automate erasure/destroy/anonymize requests

Monitor and track consent

Map data flows (cross border data transfers) and generate RoPA reports

Automate data breach response notifications

Manage vendor risk

Meet cookie compliance

Privacy policy and notice management

Data Classification

Safeguard Against Loss

... and more

See how it works

The Personal Data Protection Act (PDPA) protects Sri Lankan residents’ data while regulating how organizations collect, process, store, and maintain this data. The PDPA also grants users a wide range of data subject rights, meant to give them more control over their data.

Key Features

Automate Data Subject Request Handling

Secure Fulfillment of Data Access Requests

Automate Processing of Rectification Requests

Automate Erasure Requests

Automate Objection & Restriction Of Processing Requests

Continuous Monitoring & Tracking

Automate People Data Graph

Cookie Compliance

Monitor & Track Consent

Assess Sri Lankan PDPA readiness

Map Data Flows

Assess Third Parties Compliance

... and more

See how it works

Issued on 27 July 2006, the Russian Federal Law on Personal Data (No. 152-FZ) remains one of the oldest data protection laws in effect today. Moreover, it is one of the few laws enacted before the EU's landmark General Data Protection Regulation (GDPR).

Key Features

Automate Consumer Data Access Request Handling

Secure Fulfillment of Data Access Requests

Automate Processing of Rectification Requests

Automate Erasure Requests

Automate Objection & Restriction Of Processing Requests

Continuous Monitoring & Tracking

Cookie Compliance

Assess Third Parties

Monitor & Track Consent

Map Data Flows

Manage Vendor Risk

... and more

See how it works

Germany’s Bundesdatenschutzgesetz (BDSG) in German, or the Federal Data Protection Act in English, was enacted in May 2018 to implement the GDPR in Germany.

Key Features

Automate consumer data access request handling

Secure fulfillment of data access requests

Automate the processing of rectification requests

Automate erasure requests

Automate object and restriction of processing requests

Monitor and track consent

Assess readiness

Map data flows and generate reports

Automate data breach response notifications

Manage vendor risk

Meet cookie compliance

Privacy policy and notice management

... and more

See how it works

The Data Protection Act (DPA) of 2018 was passed in April 2016 and came into effect on May 25, 2018. This was the same day the General Data Protection Regulation (GDPR) came into effect.

Key Features

Automate Consumer Data Access Request Handling

Secure Fulfillment of Data Access Requests

Automate Processing of Rectification Requests

Automate Erasure Requests

Automate Object & Restriction of Processing Requests

Monitor & Track Consent

Assess Readiness

Map Data Flows & Generate Reports

Automate Data Breach Response Notifications

Manage Vendor Risk

Meet Cookie Compliance

Privacy Policy & Notice Management

... and more

See how it works

Directive 2002/58/EC on Privacy and Electronic Communications, known more prominently as the ePrivacy Directive, is a key set of instructions released to ensure the privacy and confidentiality of all electronic communications within the European Union (EU).

Key Features

Monitor & Track Consent

Assess Readiness

Meet Cookie Compliance

Obtain Consent for Identification Technologies

Automate Data Breach Response Notifications

Automate Privacy Notice Creation & Management

... and more

See how it works

The New York State Department of Financial Service Cybersecurity Regulations or 23 NYCRR 500 is a set of 23 cybersecurity requirements mandatory for all financial institutions registered in New York working under its Banking Law, Insurance Law, or Financial Services Law.

Key Features

Automate Risk Assessments & Audit Trails

Protect Nonpublic Information

Automate Incident Response Plan

Fulfill Vendor Risk & Third Party Service Provider Management Requirements

Fulfill Data Governance & Classification Requirement

Ensure Access Controls & Identity Management

Automate System Security & Monitoring

Fulfill Data Retention Requirements

... and more

See how it works

In November 2020, the European Commission released a draft of the new Data Governance Act. This came as a result of the 2020 European Data Strategy that aims to facilitate data sharing across sectors and member states.

Key Features

Automate Data Subjects Rights Fulfillment

Monitor and track consent

Map Data Flows & Generate Reports

Automate Data Breach Response Notifications

Privacy Notice Creation & Management

Implement Security Controls

... and more

See how it works
Request a demo
Documentation
Education

Automation, Built-in

Get started in minutes. Automate subject rights request handling with enhanced Id verification, contextual regulatory guidance, built-in workflow automation through a branded and secure privacy portal eliminating human error and inefficiencies.

Automatic Identity
Verification

Auto Regulatory
Guidance

Automated
Request Fulfillment

Individual Rights Requests

Handle privacy requests at scale through a single API driven interface or through a customizable web portal. Query, access and delete data instantly through built-in application interfaces.

Request Submission

Privacy for Engineering Teams

Handle privacy requests at scale through a simple, API driven interface or through a no-code, customizable web portal.

Buit-in Automation

Hands-free Request Fulfillment

Query, access and delete data instantly through 100s of built-in application interfaces to fully automate data requests with no human intervention.

Custom Logic

Overcome any privacy hurdle

Implement custom business logic to asynchronously interface with any internal application through secure, self-hosted gateways and fulfill data subject requests.