プライバシー・アズ・ア・サービス（Protiviti PraaS™） プライバシーを重視したテーラーメイドのフルサービス・サポート 私たちは、組織が関連する司法権や義務を理解し、ニーズを評価し、適切なコンプライアンス対策と保護措置を実施し、新しいプライバシー規制や変化する規制に対応できるよう支援します。 グローバルにデータの拡散が急速に進む中、欧州連合（EU）の一般データ保護規則（GDPR）、ブラジルの一般データ保護法（LGPD）、カリフォルニア州消費者プライバシー法（CCPA）など、新しいプライバシー法が制定され、世界各国でさまざまな派生法が制定されたり、制定が検討されたりしています。 個人データ保護のコンプライアンスプログラムの厳格なテストと、企業が準拠する複雑な法的マトリックスを作成することが変化の推進力となっています。 Respond to new and changing privacy regulations Our Privacy as a Service Capabilities Pro Building office Recurring Data Inventory, Classification, and Assessments Sustainable privacy programs are built on a foundation of data management and governance. We help build and maintain accurate records for how personal information is handled and manage your third-party due diligence, ensuring you comply with privacy laws. Download Pro Briefcase Data Subject Rights (DSR) Request Management Today’s consumers have more transparency and control over their data. With our cost-efficient, scalable solution, we help you respond effectively to consumers’ requests for information while reducing the risk of regulatory fines, lawsuits, and staffing limitations. Download Pro Rightmark Square Privacy Platform Management Few companies effectively leverage the full functionality of their privacy management solution. Our team leverages your current technology stack to build and maintain your privacy platform. Download Pro Legal Briefcase Privacy by Design Assessment and Engineering With Privacy by Design, we consider privacy throughout the entire product lifecycle—including the engineering process—providing management with full process transparency and time to focus on core competencies. Download Pro Document Stack Monitoring Privacy Legislation and Program Management New regulations call for updates to policies, procedures, controls, and governance. We help centralize alerts of applicable regulatory changes, eliminate highly manual processes, access real-time reports on privacy outcomes, and maintain personnel training standards. Download Featured insights and client stories CLIENT STORY Leading Financial Services Company Delivers Enterprise-Grade Transformation with Microsoft 5 min read Data protection is a vital cornerstone for a successful enterprise adoption of generative AI, ensuring secure and effective integration of advanced technologies. This global financial services leader, serving millions of customers worldwide,... IN FOCUS Navigating the DOJ final rule on bulk sensitive personal data: What does it mean for your business? 4 min read Multinational organizations must now comply with a sweeping new U.S. Department of Justice rule that restricts the transfer of bulk sensitive personal data to foreign adversaries. The rule, established under Executive Order 14117, went into effect... VISION The Economist’s Dexter Thillien: Privacy in peril amid digital data explosion 1 min read "When we’re talking about biometric data and biometric computing it raises a question of what type of data we might be sharing. When it is possible to change an email address or even your financial or other details, it is impossible to change your... INSIGHTS PAPER Best Practices for Building a Sustainable PCI DSS Compliance Program 9 min read Creating and maintaining a sustainable PCI DSS compliance program is a crucial and complex task for organizations to protect payment card transactions and uphold consumer trust. However, despite the PCI DSS standard being around for almost 20 years,... VISION Future of Privacy Forum CEO Jules Polonetsky on “exciting but risky” road ahead 1 min read “For better or worse, the dam burst and everyone, from the most conservative organization to the wildest startup, is rolling out [AI] stuff that comes with lots of risks.” “So we're at an inflection point, and we’ll either, over time, see some of... CLIENT STORY Global Chocolatier Adopts Privacy Technology to Prevent Data Exposure 3 min read Data privacy has become a strategic priority as companies adapt to comply with rapidly proliferating data privacy laws. Recent years have seen the adoption of the European Union’s General Data Protection Regulation (GDPR), the more recent California... Previous Article Pagination Next Article Our Comprehensive Approach to Data Privacy Data privacy regulations are in flux globally. Even as companies put the finishing touches on extensive preparations to comply with applicable privacy laws, such as the European Union’s GDPR and California’s Consumer Privacy Act, new regulations continue to be introduced in other countries. As legislators pass new laws, they continuously amend those already in effect. Data privacy regulations are not static.The problem and proposed solutions are complex and evolving. One thing is almost certain—anyone aiming to comply with a specific regulation with a target date in mind will be disappointed as those near-term obligations are supplanted by new and different rules over the mid and long-term.In response to this changing landscape, Protiviti applies a holistic framework that addresses the fundamental aspects of data privacy without being locked into any one specific compliance format. We focus on the most pressing data privacy issues companies face, including:Developing strategies to address global data privacy regulationsCompliance with regulatory obligationsAddressing resource and skill shortagesOperationalizing privacy needsImplementing privacy tools and remediation supportBy working ahead of the law in a comprehensive fashion, Protiviti helps build the foundations of a strong but flexible privacy program that includes understanding principles, educating stakeholders, and developing an applicable governance structure for managing changes. This base enables companies and their stakeholders to look to the uncertain future of privacy regulations with greater confidence. Achieve Regulatory Compliance and Remain Competitive With new data privacy laws constantly being introduced in different countries and states, it can be hard to keep up. Protiviti’s privacy compliance services help you have confidence in the uncertain future of privacy laws. Learn more Map, Manage, and Secure Your Data Data privacy can be difficult to navigate. Protiviti’s privacy experts help you map, manage, and secure your data with our data discovery services. Learn more Key Data Privacy Partners We partner closely with cybersecurity and privacy market leaders, ensuring our clients receive the best solutions to meet their needs. Notably, Protiviti has performed more global implementations than other OneTrust partners and has well over 175 OneTrust-certified consultants, including more than 10% of the global population of OneTrust Fellows of Privacy Technology spread across Europe, the Americas, and the Asia-Pacific regions. Some of our top partners include: Our Team Sameer Ansari Sameer Ansari is a Managing Director and leader of Protiviti’s Security and Privacy Practice. Sameer brings more than 20 years of experience developing and delivering complex privacy solutions to the Financial Industry, and privacy consulting and implementation ... Learn More Michael Kim Michael is a Managing Director in the Security & Privacy practice based out of the Los Angeles office. He has over 18 years of experience providing consulting and internal audit services to multi-national companies including some of the largest hospitality and ... Learn More What is Next for CISOs? The CISO Next initiative produces content and events crafted exclusively for CISOs, with CISOs. The resources focus on what CISOs need to succeed. The first step is finding out “What CISO type are you?” Get Involved
