A PrivacyOps Approach for CCPA and Beyond

Privacy regulations such as CCPA give broad rights of access, control, and consent of personal data held by corporations to individuals. These stringent new requirements challenge traditional compliance and privacy management practices which are driven by periodic manual surveys and assessments. It instead demands real-time and precise intelligence about people’s data and consents inside a myriad of systems & vendors across a company. Much like DevOps has emerged as a new approach for efficiently delivering software in a more agile way, many organizations are exploring a PrivacyOps approach of sensitive data-intelligence centric automation to compliance. This holistic approach focuses on operationalizing privacy across the organization in an efficient and agile manner.

Compliance today, when executed systematically with automation, can be an opportunity to better manage and control enterprise data resources: fulfilling not only reactive regulatory requirements, but also accelerating proactive use cases such as data science and self-service analytics initiatives.

Topics examined

• Key aspects of the new CCPA regulations and why they are fundamentally different
• A PrivacyOps approach to personal data intelligence-driven privacy automation and alignment of people, process and technology to efficiently comply with privacy regulations.
• Automating discovery of personal data, DSR fulfillment, Vendor Assessment and Consent Management

Host:

Dave Cohen, CIPP/E, CIPP/US, Knowledge Manager, IAPP