Implementing a Privacy, Risk, and Assurance Program

Introduction

• Privacy and your business

1. Why You Need a Privacy Program

• What does privacy mean?
• A history of privacy
• Privacy at the doctor's office

2. Concepts

• Security and privacy
• Regulations, standards, and compliance
• With great data comes great possibility
• With great data comes great responsibility

3. Goals of an Effective Privacy Program

• Create a privacy-aware culture
• Keep up with a changing legal landscape
• Win customer trust
• Support the mission

4. Key Components of a Privacy Program

• Staffing your privacy program
• Customer expectations from your program
• What obligations must your privacy program fulfill?
• Building your program from the ground up

5. The Privacy Working Group (PWG)

• Roles and key responsibilities
• Role of security in a privacy program
• Role of legal in your privacy working group
• Role of product management in your privacy working group
• Role of engineering in your privacy working group
• Role of data science in your privacy working group
• Role of business development in your privacy working group
• Role of privacy program leader in your privacy working group

6. The Operational Privacy Team

• Where should the operational privacy team report to?
• The operational privacy team: Mandates and workstreams
• Data classification and standards
• Tool development and automation
• Cross-functional improvements
• Audit, compliance, and risk
• Privacy reviews
• Incident response
• Privacy training

7. Measuring and Scaling Your Privacy Program

• Scaling your privacy program
• Maturity metrics: Investment
• Maturity metrics: Direction

Conclusion

• Next steps