Data Discovery

Map, manage, and secure your data

To remain compliant with data privacy regulations and legislation, your organization needs to answer the following questions:

  • Which processing operations present higher data protection risk?
  • How does my organization currently comply with regulatory obligations?
  • Is my organization in compliance with the regulation?
  • If we are in compliance, how can we prove it?
  • If we are not in compliance, how and when do we plan to achieve compliance?
  • Do we have a good understanding of where our data is and how it flows through our internal systems?

A key step toward formulating the answers to these questions lies in identifying and mapping sensitive and personal data and outlining the priority risks unique to your organization.

Data discovery helps your organization identify risks and secure information by giving you the insight to understand how personal data flows throughout the organization.  Additionally, data discovery provides the framework to support breach notifications and respond to data requests (e.g., delete, correct, access).


Understand how personal data flows throughout your organization

Our Data Discovery Solutions

Our data discovery solutions experts can help with these capabilities:

Data Mapping

To establish an internal compliance baseline, we develop asset-based inventory mapping and process data flow diagrams to visually represent key data collection and data transmission points, including cross-border data transfers and third parties.

 

Records of Processing Activities (RoPA)

Protiviti helps you establish a formal inventory of data processing operations and supporting systems where personal data is collected, processed, stored, and/or otherwise transmitted or sold to third parties.

 

Privacy Obligations

For company-wide transparency and compliance efficacy, we help establish a formal baseline and scope of privacy obligations based on applicable privacy regulations, including but not limited to GDPR, CCPA/CPRA, HIPAA, PIPEDA, and LGPD.

 

Third-Party Contract Review

No matter your company size, partnering with third-party vendors is a business standard. We help companies evaluate and redline contractual agreements with third-party processors to ensure data privacy compliance.

 

Privacy Program Optimization

Data has value for both business growth and compliance. We help you centralize, operationalize, and optimize your data by leveraging industry-leading privacy frameworks for company-wide protection and compliance, such as GDPR, AICPA, and NIST Privacy Framework.

 

BLOG

Blog Generic 6

As Manufacturing Is Transforming, Data Privacy Is a Key Risk – And One to Be Addressed Sooner Rather Than Later

Leaders of manufacturing and distribution (M&D) companies don’t rank data privacy among their list of top concerns for their organization this year — or even for the next decade. That’s one of the most striking takeaways from this industry group,...
Read More

BLOG

Blog Generic 1

E-Commerce Boom Heightens Privacy Risks, Creates Opportunity for Retailers to Enhance Data Practices

At no time in history has customer data and privacy protection been a greater concern for consumers, businesses and regulators alike than in the current pandemic environment. The massive shift to online commerce and contactless payments that began in...
Read More

BLOG

Blog Generic 8

It’s Sink or Swim for Tech Companies in High-Stakes Privacy Crackdown

Legal and compliance teams at technology companies are under significant pressure to bolster their organizations’ compliance capabilities, refresh privacy programs, and identify and mitigate increased areas of risk brought on by changes to business...
Read More

WHITEPAPER

Building a Comprehensive Data Privacy Program: Four Actionable Steps for Technology Companies

Building a Comprehensive Data Privacy Program: Four Actionable Steps for Technology Companies

Introduction Most technology companies today understand that ensuring data privacy and protection is an imperative for their business; however, few manage this process well or even invest enough resources in that effort. As governments...
Read More

Protiviti helps build the foundations of a strong but flexible privacy program

Our Comprehensive Approach to Data Privacy


Data privacy regulations are in flux globally. Even as companies put the finishing touches on extensive preparations to comply with applicable privacy laws, such as the European Union’s GDPR and California’s Consumer Privacy Act, new regulations continue to be introduced in other countries. As legislators pass new laws, they continuously amend those already in effect. Data privacy regulations are not static.

The problem and proposed solutions are complex and evolving. One thing is almost certain—anyone aiming to comply with a specific regulation with a target date in mind will be disappointed as those near-term obligations are supplanted by new and different rules over the mid- and long-term.

In response to this changing landscape, Protiviti applies a holistic framework that addresses the fundamental aspects of data privacy without being locked into any one specific compliance format. We focus on the most pressing data privacy issues companies face, including:

  • Developing strategies to address global data privacy regulations
  • Compliance with regulatory obligations
  • Addressing resource and skill shortages
  • Operationalizing privacy needs
  • Implementing privacy tools and remediation support

By working ahead of the law in a comprehensive fashion, Protiviti helps build the foundations of a strong but flexible privacy program that includes understanding principles, educating stakeholders, and developing an applicable governance structure for managing changes. This base enables companies and their stakeholders to look to the uncertain future of privacy regulations with greater confidence.


Protiviti helps build the foundations of a strong but flexible privacy program

Key Data Privacy Partners


We partner closely with cybersecurity and privacy market leaders, ensuring our clients receive the best solutions to meet their needs.

Notably, Protiviti has performed more global implementations than other OneTrust partners and has well over 175 OneTrust-certified consultants, including more than 10% of the global population of OneTrust Fellows of Privacy Technology spread across Europe, the Americas, and the Asia-Pacific regions.

Some of our top partners include:

Leadership

Sameer Ansari
Sameer is a Managing Director and the practice lead for the Data Privacy team. He has over 20 years of experience across several industries related to designing and advising privacy and data protection programs. He has also advised large global clients on cybersecurity ...
Stephen Nation
Stephen is a Director based out of Orlando. He has 20 years of diverse experience in data governance, information security, and privacy leadership, including physical and logical security solution development and implementation, compliance programme development, ...

CISO Next initiative

What is Next for CISOs?


The CISO Next initiative produces content and events crafted exclusively for CISOs, with CISOs. The resources focus on what CISOs need to succeed. The first step is finding out “What CISO type are you?”

Get Involved

CISO Next initiative
Loading...