Sitemap

Snowflake is a cloud based data warehouse that allows organizations to run large scale data analytics projects to uncover business insights, run or train machine learning models, and modernize their data infrastructure.

Key Features

• Discover personal data
• Reveal all personal data records
• Identify Data Risk
• Find data owners & fulfill DSRs in a timely manner
• Protect PII and PHI
• Visibility and enforcement of access governance

Microsoft O365 is the ubiquitous productivity suite for every business worker. Users rely on Office products such as OneDrive and SharePoint to collaborate with their co-workers.

Key Features

• Discover personal data
• Auto detect sensitive files and classify them
• Catalog & search unstructured data
• Identify Data Risk
• Find data owners & fulfill DSRs in a timely manner

Organizations want to migrate their on-premises data to cloud data stores to take advantage of scale and flexibility while reducing operational cost of managing on-premises infrastructure. However, due to privacy regulations such as GDPR, CCPA administrators have to ensure that data is migrated in compliance with these laws.

Key Features

• Discover personal data
• Catalog structured and unstructured data
• Classify and label data
• Protect PII and PHI
• Update Data Maps & Article 30 reports

Protecting sensitive content is a priority for all organizations, however, due to volume of sensitive content and

Key Features

• Discover all your sensitive data
• Auto detect & classify sensitive content
• Prevent data leaks and reduce accidental breaches
• Monitor data risk
• Comply with GDPR/CCPA by fulfilling DSRs in a timely manner

While data aids in business decision making, global privacy regulations such as GDPR, CPRA require organization to identify personal & sensitive data & use only for its intended purpose and implement adequate protection.

Key Features

• Discover sensitive data
• Reveal all sensitive data records
• Identify Data Risk
• Find data owners & fulfill DSRs in a timely manner
• Protect PII and PHI

The CDMC Framework sets up controls that companies should put in place, and establishes clear guidelines around data accountability, governance, classification, usage, protection and privacy.

CDMC Framework

• Governance & Accountability
• Cataloging & Classification
• Accessibility & Usage
• Protection & Privacy
• Data Lifecycle
• Data & Technical Architecture

Securiti enables organizations to meet multiple regulations around the world and helps with compliance requirements through AI-driven PI data discovery, DSR automation, documented accountability, enhanced visibility into data processing activities and AI-driven process automation.

Securiti is a complete PrivacyOps Solution.

The California Consumer Privacy Act (CCPA) was signed into law on June 28, 2018 and is scheduled to come into effect on January 01, 2020. Often compared to GDPR, CCPA protects consumers from mismanagement of their personal data and gives the consumer control over what data is collected, processed, shared or sold.

Key Features

• Automate consumer data access request handling
• Secure fulfillment of data access requests
• Fulfill CCPA 'do not sell' requests
• Continuous monitoring and tracking
• Automate PI data linking
• Enable opt-out mechanisms
• Monitor and track consent
• Assess CCPA readiness
• Assess third parties
• Map data flows

The California Privacy Rights Act (CPRA) will take effect from January 1, 2023, and will apply to personal information collected on or after January 1, 2022. Enforcement of the CPRA will start six months later (July 1, 2023). The CPRA builds upon the CCPA, strengthening user privacy for California residents.

Key Features

• Assess CPRA readiness
• Map data to discover sensitive personal information and catalog it
• Automate data classification & labeling
• Automate data subject rights requests for a seamless customer experience
• Monitor and track consent
• Enable Opt-out Mechanisms
• Continuous monitoring and tracking
• Automate People Data Graph
• Manage vendor risk
• Privacy Policy & Notice Management

The EU General Data Protection Regulation (GDPR) came into effect on May 25, 2018 and changed the global privacy landscape. It has broadened the definition of processing activities and personal data, impacting companies worldwide, and has tightened the rules to obtain consent before processing information.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access and port requests
• Automate objection and processing restriction requests
• Automate erasure requests
• Automate object and restriction of processing requests
• Continuous monitoring and tracking
• Automate PI data linking
• Meet cookie compliance
• Monitor and track consent
• Assess GDPR readiness
• Map data flows and generate article 30 reports
• Manage vendor risk

The Lei Geral de Proteção de Dados (LGPD) is modeled with similarities to the General European Data Protection Regulation (GDPR) and contains sixty-five articles. It was approved on August 14, 2018 and its validity has undergone several changes, the last relevant fact being MPV 959. LGPD is in effect since September 18, 2020. The sanctions by the ANPD (Brazilian Data Protection Authority) were postponed to August 2021. The LGPD allows people have more rights over their data and expects organizations to comply with their regulations or face heavy penalties or fines.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access and port requests
• Automate processing of rectification requests
• Automate erasure requests
• Automate object and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess LGPD readiness
• Map data flows and generate reports
• Manage vendor risk

China has complex data protection and data security regime, however, the following are three main laws that primarily cover China’s data protection and data security regulatory framework. These laws are:

Frameworks

• Cybersecurity Law - CSL
• Data Securitiy Law - DSL
• Personal Information Protection Law - PIPL

UAE have number of laws in place that govern privacy as well as data security in the UAE. Some of those includes:

Frameworks

• UAE Personal Data Protection Law
• DIFC Data Protection Law
• Abu Dhabi's ADHICS
• Abu Dhabi's ADGM DPR
• UAE TRA’s Consumer Protection Regulations
• CBUAE SVF Regulation

The government of New Zealand has recently replaced its long-existing Privacy Act of 1993 with a modernized version, the Privacy Act 2020. The New Zealand Privacy Act 2020 (NZPA) will take effect from December 1, 2020.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access and port requests
• Automate the processing of rectification requests
• Automate erasure requests
• Automate object and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess NZPA readiness
• Breach Response Notification
• Manage vendor risk

The Personal Data Protection Act, B.E. 2562 (2019) ('PDPA') is Thailand's first consolidated data protection law, which was published in the Thai Government Gazette on 27 May 2019. This law was said to go into effect on 27 May 2020. However, in May 2020, the Thai Cabinet through a Royal Decree has deferred the enforcement of certain data protection provisions of the PDPA until 31 May 2021.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access and port requests
• Automate the processing of rectification requests
• Automate erasure requests
• Automate object and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess PDPA readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification

In order to protect the data of individuals in South Africa, Parliament assented to the Protection of Personal Information Act (POPIA) on 19th November 2013. The commencement date of section 1, Part A of Chapter 5, section 112 and section 113 was 11 April 2014. The commencement date of the remaining sections (excluding section 110 and 114(4)) was 1st July 2020. As per the Regulator’s Operational Readiness Plan the Regulator will be able to take enforcement actions for the violation of POPIA by July 1st 2021.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access and port requests
• Automate the processing of rectification requests
• Automate erasure requests
• Automate object and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess POPIA readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification

Singapore’s Personal Data Protection Act (PDPA) comprises various provisions governing the collection, disclosure, use, and care of personal data. It recognizes the rights of individuals to have more control over their personal data and the needs of organizations to collect, use, or disclose personal data for legitimate and reasonable purposes.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access and port requests
• Automate the processing of rectification requests
• Automate objection and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess PDPA readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification

The Canadian data laws aim to give consumers control over their data and promote greater transparency about how organizations use data containing personal identifiers.

Frameworks

• Canada's PIPEDA
• Quebec Privacy Act

The Australian data laws aim to give consumers control over their data and promote greater transparency about how organizations use data containing personal identifiers.

Frameworks

• APRA Prudential Standard CPS 234 Information Security
• The Australia Privacy Act & Australian Privacy Principles (APPs)

After the invalidation of Privacy Shield, many companies are relying on the SCCs in order to continue transferring data of EU citizens to companies based in countries who are not deemed adequate for data transfer.

After the CJEU judgement, it is clear that these companies have to conduct Risk Assessments with the data recipients in these countries in order to ensure they have enough controls to mitigate any potential data or regulatory risk.

Key Features

• Conduct EU-US Data Transfer Risk Assessments based on Schrems II decision
• Identify and review data transfers from the European Union
• Manage and remediate discovered vendor risks

On January 31, 2020, the government of Saudi Arabia issued the Executive Regulations to the Saudi E-Commerce Law 2019 (“ECL”) that was in effect since October 2019. The Executive Regulations together with the ECL (“Law”) aim to protect consumers’ personal data by requiring organizations to take appropriate technical and administrative measures.

Key Features

• Automate processing of rectification requests
• Automate erasure requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Monitor and track consent
• Assess ECL readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification

Turkey was one of the first countries to start the trend of legislating data protection. Turkey published “Law on the Protection of Personal Data No. 6698 (LPPD) covering personal data protection on April 07, 2016.” The LPPD is based on the European Union Data Protection Directive 95/46/EC and has several similarities with the GDPR. It aims to give data subjects’ control over their personal data and outlines obligations that organizations and individuals dealing with personal data must comply with. The LPPD has also provided comprehensive guidelines for the transfer of personal data to the third parties.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access
• Automate the processing of rectification requests
• Automate erasure requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess LPPD readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification

In December 2019, India, following several other countries' footsteps on the privacy laws' developments, introduced the Personal Data Protection Bill (PDPB) to regulate the processing, collection, and storage of personal data. However, in November 2021, the bill’s name was amended to now be called the Data Protection Bill 2021 (DPB).

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access
• Automate the processing of rectification requests
• Automate erasure requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess DPB readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification

The Irish Data Protection Act, 2018 (Irish DPA) implements the General Data Protection Regulation (GDPR) and transposes the European Union Law Enforcement Directive in Ireland. Since it incorporates most of the provisions from the GDPR and the Law Enforcement Directive with limited additions and deletions as per the national law, it is considered to be the principal data protection legislation in Ireland.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access
• Automate the processing of rectification requests
• Automate object and restriction of processing requests
• Automate erasure requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess DPA readiness
• Map data flows
• Manage vendor risk

The Personal Data (Privacy) Ordinance (Cap. 486) as amended in 2012 (the “PDPO) is the primary legislation in Hong Kong which was enacted to protect the privacy of individuals’ personal data, and regulate the collection, holding, processing, disclosure, or use of personal data by the organizations.. The Data Protection Principles ( the “DPPs or DPP ''), which are contained in Schedule 1 to the PDPO, outline how entities should collect, handle, disclose, and use personal data.

Key Features

• Automate data subject access request handling
• Secure fulfillment of data access
• Automate the processing of rectification requests
• Automate erasure requests
• Automate object and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess PDPO readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification

In 2012, the Philippines passed the comprehensive privacy law, Data Privacy Act 2012 Republic Act. No, 10173 (the "DPA"). The DPA recognizes the rights of individuals to have more control over their personal data while ensuring a free flow of information to promote innovation and growth.

Key Features

• Automate data subject access request handling
• Secure fulfillment of data access
• Automate the processing of rectification requests
• Automate erasure requests
• Automate object and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess DPA readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification

South Korea has a general law and several special laws that cover data protection and individuals' privacy. South Korea's data protection regime is considered one of the strictest data protection regimes owing to its notification requirements, opt-in consent, extensive data subject rights, mandatory data breach notifications, and heavy sanctions in case of non-compliance.

Key Features

• Customize DSR Request Portal
• Automate Data Subject Access Request Handling
• Secure Fulfillment of Data Access
• Automate Processing of Rectification Requests
• Automate Erasure Requests
• Automate Objection & Restriction of Processing Requests
• Continuous Monitoring & Tracking
• Automate People Data Graph
• Meet Cookie Compliance
• Monitor & Track Consent
• Assess PIPA Readiness
• Map Data Flows
• Manage Vendor Risk
• Breach Response Notification

The Act on the Protection of Personal Information (the "APPI'') regulates personal related information and applies to any Personal Information Controller (the “PIC''), that is a person or entity providing personal related information for use in business in Japan. The APPI also applies to the foreign PICs which handle personal information of data subjects (“principals”) in Japan for the purpose of supplying goods or services to those persons.

Key Features

• Customize DSR Request Portal
• Automate Data Subject Access Request Handling
• Secure Fulfillment of Data Access
• Automate Processing of Rectification Requests
• Automate Erasure Requests
• Automate Objection & Restriction of Processing Requests
• Continuous Monitoring & Tracking
• Automate People Data Graph
• Meet Cookie Compliance
• Monitor & Track Consent
• Assess Japan APPI readiness
• Map Data Flows
• Manage Vendor Risk
• Breach Response Notification

Qatar is the first gulf country that has passed a national data privacy law and has paved the way for all other gulf countries to follow suit. In 2016, Qatar enacted Law no. 13 Concerning Personal Data Protection (the “DPL”). Qatar became the first Gulf Cooperation Council (GCC) member state to issue an “European Style” applicable data protection law. The DPL establishes a certain degree of personal data protection, provides data subject rights, and prescribes the guidelines for organizations for the processing of personal data within Qatar.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access
• Automate processing of rectification requests
• Automate erasure requests
• Automate objection and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess Qatar DPL readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification

Bahrain has become a part of the countries that have enacted a data privacy regulation to protect the rights of their residents. On 12 July 2018, Bahrain drafted its law on data protection regulation, Law No. 30. This then went on to go into effect on the 1st of August 2019 as the Bahrain Personal Data Protection Law (PDPL) and supersedes all other laws. The PDPL recognizes the rights of individuals to have more control over their personal data and the needs of organizations to collect, use, or disclose personal data for legitimate purposes.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access
• Automate processing of rectification requests
• Automate erasure requests
• Automate objection and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess Bahrain PDPL readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification
• Privacy Policy & Notice Management

After the Success of the California Consumer Privacy Act (CCPA) in California, Virginia is now following the same path. The Virginia Consumer Data Protection Act (VCDPA) has been passed and will go into effect on 1st of January 2023. This law is closely designed after the newer California Privacy Rights Act (CPRA) but with a few significant and important differences.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access
• Automate processing of rectification requests
• Automate erasure requests
• Automate objection and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess Bahrain PDPL readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification
• Privacy Policy & Notice Management

After the VCDPA in Virginia, Colorado has closely followed suit and has passed their own comprehensive data privacy law to protect the personal data of the residents of Colorado.The Colorado Privacy Act (CPA) was signed into law on the 8th of July, 2021 and has been modelled closely after the VCDPA.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access
• Automate processing of rectification requests
• Automate erasure requests
• Automate objection and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess Bahrain PDPL readiness
• Map data flows
• Manage vendor risk
• Breach Response Notification
• Privacy Policy & Notice Management

Saudi Arabia has drafted a data privacy regulation to protect the personal data of individuals in Saudi Arabia. This law was approved by the Council of Ministers in Saudi Arabia and is named the Personal Data Protection Law (the “PDPL”).

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access requests
• Automate processing of rectification requests
• Automate erasure requests
• Automate objection and restriction of processing requests
• Continuous monitoring and tracking
• Automate People Data Graph
• Meet cookie compliance
• Monitor and track consent
• Assess Saudi PDPL readiness
• .. and more

Uganda’s Data Protection and Privacy Act 2019 seeks to protect Uganda’s citizens and their personal data by outlining and implementing rules for processing personal data and sensitive personal data by entities within or outside the country.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access requests
• Automate processing of rectification requests
• Automate erasure requests
• Automate objection and restriction of processing requests
• Monitor and track consent
• Assess data protection and privacy act readiness
• Map data flows/cross border data transfers
• Meet cookie compliance
• Automate breach response notification
• Manage vendor risk
• .. and more

Ghana Data Protection Act 2012 establishes a comprehensive set of provisions governing the collection, processing, use, and protection of personal data by the data controller or data processor.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access requests
• Automate processing of rectification requests
• Automate erasure requests
• Automate objection and restriction of processing requests
• Monitor and track consent
• Assess Ghana’s DPA 2012 readiness
• Meet cookie compliance
• Automate breach response notification
• Manage vendor risk
• .. and more

Kenya’s Data Protection Act, 2019 (DPA) is based on the framework of the EU’s General Data Protection Regulation (GDPR), making it the third region in East Africa to have enacted and enforced data protection regulations.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Automate data subject access request handling
• Secure fulfillment of data access requests
• Automate processing of rectification requests
• Automate erasure requests
• Automate objection and restriction of processing requests
• Monitor and track consent
• Assess data protection and privacy act readiness
• Meet cookie compliance
• Automate breach response notification
• Manage vendor risk
• .. and more

Malaysia’s Personal Data Protection Act (PDPA) was passed by the Parliament of Malaysia on 2 June 2010. The PDPA sets out a complete cross-sectoral framework to protect the personal data of individuals with respect to commercial transactions.

Key Features

• Automate data subject request handling
• Secure fulfillment of data access requests
• Automate the processing of rectification requests
• Automate object and restriction of processing requests
• Automate erasure/destroy/anonymize requests
• Monitor and track consent
• Continuous monitoring and tracking
• Assess PDPA readiness
• Map data flows and generate reports
• Automate data breach response notifications
• Manage vendor risk
• Meet cookie compliance
• Privacy policy and notice management
• .. and more

Although there is no comprehensive data protection law in Indonesia, however, there are several regulations that regulate the Indonesia's draft Personal Data Protection Bill (PDPB) & Personal Data Protection Regulations (PDP Regulations)

Frameworks

• Indonesia's PDP Regulations
• Indonesia's Draft Personal Data Protection Bill (PDPB)

Oman’s Personal Data Protection Law (Oman’s PDPL) has been published in the country’s official gazette, and it will come into force by February 9, 2023, one year after its issuance which was February 9, 2022. The law applies to any natural person’s personal data including but not limited to their name, location data, identification number, and health-related information.

Key Features

• Customize a data subject rights request portal for seamless customer care
• Assess Oman’s PDPL Readiness
• Automate consumer data request handling
• Secure fulfillment of data access requests
• Automate the processing of rectification requests
• Automate erasure/destroy/anonymize requests
• Automate object and restriction of processing requests
• Meet cookie compliance
• Monitor and track consent
• Automate data breach response notifications
• Manage vendor risk
• Map data flows (cross border data transfers) and generate RoPA reports
• Privacy policy and notice management
• ... and more

Kuwait’s Data Privacy Protection Regulations (DPPR) applies to all public and private Telecommunication Services Providers and related industry sectors who collect, process, and store personal data and user-related content in whole or in part of a data storage system, whether processed inside or outside the State of Kuwait.

Key Features

• Assess Kuwait's DPPR Readiness
• Automate consumer data request handling
• Secure fulfillment of data access requests
• Automate the processing of rectification requests
• Automate erasure/destroy/anonymize requests
• Monitor and track consent
• Map data flows (cross border data transfers) and generate RoPA reports
• Automate data breach response notifications
• Manage vendor risk
• Meet cookie compliance
• Privacy policy and notice management
• Data Classification
• Safeguard Against Loss
• ... and more

The Personal Data Protection Act (PDPA) protects Sri Lankan residents’ data while regulating how organizations collect, process, store, and maintain this data. The PDPA also grants users a wide range of data subject rights, meant to give them more control over their data.

Key Features

• Automate Data Subject Request Handling
• Secure Fulfillment of Data Access Requests
• Automate Processing of Rectification Requests
• Automate Erasure Requests
• Automate Objection & Restriction Of Processing Requests
• Continuous Monitoring & Tracking
• Automate People Data Graph
• Cookie Compliance
• Monitor & Track Consent
• Assess Sri Lankan PDPA readiness
• Map Data Flows
• Assess Third Parties Compliance
• ... and more

Issued on 27 July 2006, the Russian Federal Law on Personal Data (No. 152-FZ) remains one of the oldest data protection laws in effect today. Moreover, it is one of the few laws enacted before the EU's landmark General Data Protection Regulation (GDPR).

Key Features

• Automate Consumer Data Access Request Handling
• Secure Fulfillment of Data Access Requests
• Automate Processing of Rectification Requests
• Automate Erasure Requests
• Automate Objection & Restriction Of Processing Requests
• Continuous Monitoring & Tracking
• Cookie Compliance
• Assess Third Parties
• Monitor & Track Consent
• Map Data Flows
• Manage Vendor Risk
• ... and more

Germany’s Bundesdatenschutzgesetz (BDSG) in German, or the Federal Data Protection Act in English, was enacted in May 2018 to implement the GDPR in Germany.

Key Features

• Automate consumer data access request handling
• Secure fulfillment of data access requests
• Automate the processing of rectification requests
• Automate erasure requests
• Automate object and restriction of processing requests
• Monitor and track consent
• Assess readiness
• Map data flows and generate reports
• Automate data breach response notifications
• Manage vendor risk
• Meet cookie compliance
• Privacy policy and notice management
• ... and more

The Data Protection Act (DPA) of 2018 was passed in April 2016 and came into effect on May 25, 2018. This was the same day the General Data Protection Regulation (GDPR) came into effect.

Key Features

• Automate Consumer Data Access Request Handling
• Secure Fulfillment of Data Access Requests
• Automate Processing of Rectification Requests
• Automate Erasure Requests
• Automate Object & Restriction of Processing Requests
• Monitor & Track Consent
• Assess Readiness
• Map Data Flows & Generate Reports
• Automate Data Breach Response Notifications
• Manage Vendor Risk
• Meet Cookie Compliance
• Privacy Policy & Notice Management
• ... and more

Directive 2002/58/EC on Privacy and Electronic Communications, known more prominently as the ePrivacy Directive, is a key set of instructions released to ensure the privacy and confidentiality of all electronic communications within the European Union (EU).

Key Features

• Monitor & Track Consent
• Assess Readiness
• Meet Cookie Compliance
• Obtain Consent for Identification Technologies
• Automate Data Breach Response Notifications
• Automate Privacy Notice Creation & Management
• ... and more

The New York State Department of Financial Service Cybersecurity Regulations or 23 NYCRR 500 is a set of 23 cybersecurity requirements mandatory for all financial institutions registered in New York working under its Banking Law, Insurance Law, or Financial Services Law.

Key Features

• Automate Risk Assessments & Audit Trails
• Protect Nonpublic Information
• Automate Incident Response Plan
• Fulfill Vendor Risk & Third Party Service Provider Management Requirements
• Fulfill Data Governance & Classification Requirement
• Ensure Access Controls & Identity Management
• Automate System Security & Monitoring
• Fulfill Data Retention Requirements
• ... and more

In November 2020, the European Commission released a draft of the new Data Governance Act. This came as a result of the 2020 European Data Strategy that aims to facilitate data sharing across sectors and member states.

Key Features

• Automate Data Subjects Rights Fulfillment
• Monitor and track consent
• Map Data Flows & Generate Reports
• Automate Data Breach Response Notifications
• Privacy Notice Creation & Management
• Implement Security Controls
• ... and more

The EU Digital Markets Act (DMA) is part of the EU Digital Services Package that aims to create a safer online space along with the EU Digital Services Act (DSA). The DMA aims to ensure a contestable, fair, and competitive digital market and to ban unfair business practices by large online platforms.

Key Features

• Map Data Flows
• Monitor and Track Consent
• Privacy Notice Creation & Management
• Implement Security Controls
• ... and more

Saudi Arabia has complex data protection and data security regime, however, the following are three main laws that primarily cover Saudi Arabia's data protection and data security regulatory framework. These laws are:

Frameworks

• Saudi PDPL
• E-commerce Law - ECL
• National Data Management & Personal Data Protection

Since France is a member of the European Union, it is subject to the General Data Protection Regulation (GDPR). However, like every other EU member, the country must incorporate the GDPR in its domestic legal framework.

Key Features

• Assess Readiness
• Automate Consumer Data Request Handling
• Automate the Processing of Rectification Requests
• Automate Erasure/Destroy/Anonymize Requests
• Automate Object and Restriction of Processing Requests
• Automate Data Protection Impact Assessment (DPIA)
• Map Data Flows (Cross-Border Data Transfers) and Generate RoPA Reports
• Monitor and Track Consent
• Automate Data Breach Response Notifications
• Manage Vendor Risk
• Meet Cookie Compliance
• Privacy Policy and Notice Management
• Implement Security Measures
• ... and more

The Biometric Information Privacy Act (BIPA), an initiative spearheaded by the ACLU of Illinois, was unanimously approved by the Illinois legislature in 2008. BIPA creates guidelines to protect the privacy and security of Illinois residents.

Key Features

• Assess BIPA readiness
• Continuous Monitoring and Tracking
• Breach Response Notification
• Privacy Policy & Notice Management
• Monitor and Track Consent
• Assess Data Protection Measures and Enable Appropriate Security Controls
• ... and more