CFPB’s Personal Financial Data Rights Rule

Assess Proposed Rule Readiness

Utilize Securiti's collaborative readiness assessment template to assess your organization's compliance with the requirements of the final rule, assess compliance gaps, and mitigate risks. Seamlessly expand assessment capabilities across your vendor ecosystem to maintain compliance against the final rule.

Auto Compliance Management

Automated compliance with the proposed rule using Securiti’s common controls and tests.

Automate Notice Creation & Management

Sections: 1033.341, 1033.421

Securiti's Privacy Notice Creation and Management module can be utilized to fulfill the transparency requirements under the final rule i.e., making available identifying information, developer interface documentation, etc.

Manage Consent

Sections: 1033.401, 1033.411

Securiti's Universal Consent Management module can be utilized to provide the consumer with authorization disclosures and obtain express informed consent to access and process their data. Covered entities can also track consent to prevent the collection or processing of covered data without authorization.

Automate Information Requests

Sections: 1033.201, 1033.301, 1033.311, 1033.321, 1033.331

Securiti's Data Subject Rights Fulfillment module can be utilized to create customized web forms and accept verified information requests in compliance with the final rule.

Ensure Data Security

Sections: 1033.131, 1033.301, 1033.311

Securiti’s Data Security Posture management module can be leveraged to identify the necessary security controls and implement appropriate security measures in compliance with the final rule.

Maintain Records of Data

Sections: 1033.351, 1033.441

Securiti’s Data Mapping module can be utilized to catalog the data, document business process flows, and maintain records of consumer data processing activities.

Vendor Risk Assessment

Sections: 1033.431

Securiti’s Vendor Risk Management module can be leveraged to track, monitor, and manage the privacy and security readiness of third parties and data aggregators in compliance with the final rule. It also allows organizations to manage all vendor contracts and compliance documents.