Data Privacy Consulting Proactively navigate the data privacy regulation landscape Organisations are experiencing unprecedented change in the data privacy landscape. Changing privacy regulations are forcing constant business, technical, and legal operational changes. These changes often overlap, resulting in highly complex legal and regulatory scenarios. We offer a dedicated global cross-functional team that includes former regulatory agency officials, attorneys, chief privacy and data officers, technologists and privacy consultants, and auditors to help you build, implement, and optimise your data security and privacy program.We partner with you to understand jurisdictions and regulatory obligations, assess your privacy needs, implement compliance measures for General Data Protection Regulation (GDPR) compliance and the Privacy Act 1988 (Privacy Act) and safeguards and respond to new and changing regulations. Learn More Survey December 7, 2023 Executive Perspectives on Top Risks for 2024 and 2034 The 12th annual Top Risks Survey report highlights top-of-mind issues for directors and executives around the globe over the next year - 2024 - and a decade later – 2034. Learn more Data privacy consulting services Pro Briefcase Privacy compliance Compliance with current and future privacy laws such as GDPR, the Privacy Act 1988 (Privacy Act), and the Privacy and Data Protection Act 2014 requires disciplined execution. From developing a robust compliance strategy to managing consent order response and data subject requests for information, Protiviti can help at every stage. Pro Building office Data discovery We help establish a formal inventory of data to capture where personal data is collected, processed, and stored. Paired with data privacy flow mapping, classification, and assessments, companies can automate and optimise their data discovery efforts. Pro Rightmark Square Privacy as a service (Protiviti PraaS™) Think of us as an extension of your team. We provide tailored, full-service support to assess privacy needs, implement and automate privacy-related functions, and respond to new and changing regulations. Australia’s Privacy Act is fundamentally changing: What this means for your organisation On 16 February 2023, the Attorney-General’s Department released its Privacy Act Review Report (the Report) following a two-year review of the Privacy Act 1988 (Cth) (the Act). The Report contains 116 recommended amendments to the existing Act to strengthen the protection of personal information and the control individuals have over their information. Read More Our comprehensive approach to data privacy Data privacy regulations are in flux globally. Even as companies put the finishing touches on extensive preparations to comply with applicable privacy laws, such as the European Union’s GDPR, Australia’s Privacy Act 1988 (Privacy Act) and California’s Consumer Privacy Act, new regulations continue to be introduced in other countries. As legislators pass new privacy laws, they continuously amend those already in effect. Data privacy regulations are not static.The problem and proposed solutions are complex and evolving. One thing is almost certain—anyone aiming to comply with a specific privacy regulation with a target date in mind will be disappointed as those near-term obligations are supplanted by new and different rules over the mid- and long-term.In response to this changing landscape, Protiviti applies a holistic framework that addresses the fundamental aspects of data security and privacy without being locked into any one specific compliance format. We focus on the most pressing data privacy issues companies face, including:Developing strategies to address global data privacy regulationsCompliance with regulatory obligationsAddressing resource and skill shortagesOperationalising privacy needsImplementing privacy tools and remediation supportBy working ahead of the law in a comprehensive fashion, Protiviti helps build the foundations of a strong but flexible privacy program that includes understanding principles, educating stakeholders, and developing an applicable governance structure for managing changes. This base enables companies and their stakeholders to look to the uncertain future of privacy regulations with greater confidence. Download service offerings Data breach crisis simulation Are you avoiding the cost of data privacy services, but do you know that the cost of a data breach could be higher? Protect your business from data breaches before they happen with our data breach crisis simulation services. Download now Data mapping Protecting personal data is not just good practice; it's the law. Navigate the complexities of data privacy regulations and give your clients the peace of mind they deserve with our data mapping services. Download now Privacy health check and reform readiness assessment Stay ahead of changing regulations and protect your customers' data with our privacy health check and reform readiness assessment services. Download now Leadership Leslie Howatt Leslie is a managing director, and Protiviti’s technology consulting solution and diversity, equity, and inclusion lead. She specialises in digital and technology strategy as well as transformational change with over 25 years’ experience across consulting, industry, and ... Learn More Ghislaine Entwisle Ghislaine is a managing director and leader in technology consulting and business performance improvement. She has over 20 years of applied experience across strategy, transformation, and delivery, guiding CIOs, CFOs, CDOs and CISOs in transformational initiatives that ... Learn More Hanneke Catts Hanneke is a director in Sydney with over 15 years’ experience focusing on technology consulting, including privacy, technology risk, project management and assurance, IT controls and security compliance, enterprise risk management, and internal audit and regulatory ... Learn More Hirun Tantirigama Hirun is a managing director with 15 years’ experience in providing risk and regulatory advisory services across a variety of clients and industries. He has led complex, transformational programs across areas such as operational risk, regulatory remediation, operational ... Learn More Key data privacy partners We partner closely with cybersecurity and privacy market leaders, ensuring our clients receive the best solutions to meet their needs.Notably, Protiviti has performed more global implementations than other OneTrust partners and has well over 175 OneTrust-certified consultants, including more than 10% of the global population of OneTrust Fellows of Privacy Technology spread across Europe, the Americas, and the Asia-Pacific regions.Some of our top partners include: CISO Next CISO Next connects CISOs and security thought leaders to explore and shape how their role will evolve in the current and future business landscape. Stay informed on latest trends, network with fellow CISOs, and build solutions for the future. Get involved INSIGHTS PAPER How data sovereignty and data localisation impact your privacy programmes The concepts of data sovereignty and data localisation stem from a desire to keep data within a country’s borders for greater control. While the broad strokes of various privacy laws may be consistent across jurisdictions, governments will dictate... BLOGS Australia’s Privacy Act is fundamentally changing: What this means for your organisation On the 28th of September, the Australian Government released its long-awaited response to the Attorney General’s Privacy Act Review Report. The Government response outlines its stance across the 116 proposals put forward by the Attorney General. In... WHITEPAPER 2023 State of Play – Australian Privacy Reform Three years on from announcing it would be undertaking a review to “consider whether the scope of the Privacy Act 1988 and its enforcement mechanisms remain fit for purpose”, and a full year after its initial target completion date, the Attorney... WHITEPAPER Managing Privacy Under One Roof Introduction With regulatory change on the horizon with the Attorney-General’s Department currently reviewing the Privacy Act 1988 and proposing reform, high volumes of unrestricted personal data or misuse of personal data by external parties... WHITEPAPER Privacy Act Review Privacy Act 1988 Review: A Compliance Burden or Welcome Change? It has been more than two years since the Attorney-General’s Department announcedit would be undertaking a review of thePrivacy Act 1988. The review will likely result... BLOGS Metrics’ role in cyber transformation We’ve all heard the saying, “what gets measured gets done,” meaning that regular measurement and reporting helps to keep organisations focused on the information that matters. But with so many data points available to measure security, it is... Button Button The present and future of data privacy What’s next for data privacy programs? Listen to Protiviti leaders around the world talk about the sustainability of privacy investments. A number of organisations are struggling with sustainability. Data breaches will happen at some point in time, hence knowing your personal data and understanding where the data is, or mapping data is critical. Watch this video to gain insights on (a) how to sustain the benefits that we have gained through the investments that have been made, (b) what the biggest issues in terms of sustainability are, and (c) how to drive sustainability through your data privacy program.