Managing a cross-border privacy program can be a challenge when your organization needs to comply with a multitude of privacy laws, each with their own specificities. Many organisations have therefore decided to use a compliance framework as the backbone of their privacy program. This has the advantage that a standard set of criteria can be used to build out the program, which in return are mapped to the various legal requirements.
In 2013, Nymity started the development of its Privacy Management Accountability Framework™ (PMAF), that is currently being used by thousands of companies around the world. It was originally developed for communicating the status of the privacy program and to demonstrate accountability. It was designed to report on any privacy program, no matter how it is structured. TrustArc on their turn developed the TrustArc Privacy and Data Governance Framework (P&DG Framework), that is embedded deep in its intelligence and operational software solutions as well as the TRUSTe assurance programs. With the two companies combining their forces since November 2019, the joint teams have worked hard to integrate the two respective frameworks, resulting in today’s launch of the TrustArc-Nymity Privacy and Data Governance Accountability Framework™ (the Framework).
The Core: Three Pillars
The core of the new integrated Frameworks is formed by three pillars: Build, Implement and Demonstrate. These three pillars align with the main phases of developing an accountable privacy program that supports compliance with applicable laws and regulations as they evolve over time.
Build: Design, establish, and manage a program to ensure effective governance, risk management, policies, processes, and accountability.
Implement: Define data needs, identify data processing risks, ensure the data processing is lawful, manage data flows and third parties, address individual rights, provide d ..
Support the originator by clicking the read the rest link below.
