As the regulations surrounding data privacy are changing rapidly, much of the focus is on potential financial penalties and negative impacts. In this presentation we look at the regulations from a different perspective. How can these new regulatory risks create opportunities for your company’s communication flows and first-party data offerings?

1. Compliance is an Opportunity
Leveraging Regulation

2. What is Privacy?
Privacy is about
giving people the
right to choose
what information
they share

3. • 81% say they’ve become more concerned about how companies
use their data
• 87% think companies should be more heavily regulated on
personal data management
• 89% said companies should be clearer about how their products
use data.
How people feel about data
privacy
*Source: IBM’s Institute for Business Value; February 2019

4. • 71% said they would give up privacy to access
technological features
• 45% have updated the privacy settings on
products in response to data concerns
What people do to protect privacy
*Source: IBM’s Institute for Business Value; February 2019

5. Providing choice builds trust,
helps with compliance, and
creates business opportunities

6. Protecting First-Party Data
• Data Regulations create an opportunity
for pragmatic conversations around
First-Party data
• Know what data you have, where it’s
stored, and who it goes to
• CCPA allows data subjects the right to
opt-out of data selling

7. Data Processing Addendum
• Opportunity to align partners
with your data’s value and
compliance posture
• Review your agreements with
partners and vendors on data
ownership
• GDPR requirement that all
vendors are also compliant

8. Compliance is an evolving process
• CCPA may not be the last data privacy
regulation
• Proposed state laws (NY, WA, MA, TX,
ND, ME)
• Multiple active congressional proposals
(DETOUR, Data Care Act, DNT+)
• Private lobbying for a Federal Regulation

9. Collaborative Approach
Steering Committee
ComplianceWorking Group
Privacy Ambassadors

10. Collaborative Approach
• Sr Leadership from across the
organization both technical and
non-technical
• Reviews policy suggestions,
executive sponsors for compliance
efforts, and provide an escalation
point for key decisions
• Meets quarterly to discuss changes
in data management & policy
Steering Committee
ComplianceWorking Group
Privacy Ambassadors

11. Collaborative Approach
• Comprised of individuals from
various groups who have an primary
stake in data privacy compliance
• Creates compliance action plan,
writes policies, propose
organizational standards, and
reviews regulations
• Meets bi-weekly to provide status
updates and discuss policy changes
Steering Committee
ComplianceWorking Group
Privacy Ambassadors

12. Collaborative Approach
• Dedicated individual from all
business units who process personal
data
• Gives details on data processes,
validates retention schedules, and
provides feedback on the impact of
policy changes
• Meets quarterly or on a project by
project basis
Steering Committee
ComplianceWorking Group
Privacy Ambassadors

13. Top 5 Steps to compliance
1.Privacy Impact Assessments
2.Identify Key Stakeholders
3.Create and Update Data Inventory
4.Create and Update Policies
5.Stay Ahead of New or Changing Regulations

14. Thank
You!