Accessing the privacy platform

Upon purchasing the Privacy Platform, organisations can assign tailored access levels through the User Management feature, ensuring that team members have access to the tools and data relevant to their responsibilities in privacy management.

For further information on the Privacy Platform refer to the following Help Centre articles:

• Data Protection Impact Assessments (DPIA)
• Records of Processing and Records of Processing Activity
• Incident Management
• Vendor and Processing Operation Assessments
• Privacy Dashboard

Understanding the privacy platform

The Privacy Platform includes:

• Data Protection Impact Assessment (DPIA) - The DPIA tool allows organisations to proactively address privacy concerns, minimise the likelihood of data breaches, and build trust with users and regulators.
  
• Incident Management (IM) - With Incident Management, organisations can respond effectively to data breaches or privacy incidents. This tool provides a structured approach to recording, assessing, and resolving incidents, ensuring that organisations comply with regulatory requirements for incident reporting and documentation.
  
• Vendor Assessment (VA)  - The VA and Processing Operation Assessment (POA) features enables organisations to evaluate third-party vendors’ privacy practices, ensuring that their data protection policies meet the organisation’s standards. VA includes privacy-vetted contracts and policies, supporting organisations in selecting compliant vendors that align with organisational privacy goals. This aspect of the Platform provides insights into each data processing operation, allowing organisations to map data flows, assess risks, and ensure compliance with privacy standards.
  
• Record of Processing Activities (ROPA) - Records of Processing and RoPA simplifies the documentation of all processing areas and activities across the organisation. Organisations can maintain up-to-date records of data usage, including purpose, legal basis, and retention schedules, supporting GDPR compliance and providing a clear view of data processing operations.
  
• Risks and Issues Management - The Risks and Issues tool allows organisations to track privacy-related risks and issues, categorising them by severity, likelihood, and impact. This structured approach helps organisations proactively manage privacy risks and address vulnerabilities in data handling practices.
  
• Lessons - The Lessons feature enables organisations to capture insights from past privacy matters, helping prevent similar issues in the future.
  
• Task Management - Tasks can be assigned and tracfked within the Platform to support compliance workflows, ensuring that all privacy obligations are managed efficiently.
  
• Privacy Dashboard - The Privacy Dashboard provides a consolidated view of the organisation’s privacy status, displaying key metrics, recent incidents, upcoming reviews, and outstanding tasks. With this dashboard, administrators can monitor compliance progress, quickly identify potential issues, and gain insight into data privacy trends within the organisation.
  

Can we integrate the Privacy Platform with vendor compliance requirements?

Yes, the platform integrates vendor assessments with data protection impact assessments, records of processing areas, and records of processing activities, enabling organisations to evaluate and document vendors’ privacy practices, review contracts, and link vendors to specific processing operations.

How can the Privacy Dashboard improve our privacy practices?

The Privacy Dashboard provides real-time visibility into privacy tasks, incidents, and compliance metrics, helping organisations stay on top of obligations, spot potential issues, and make data-informed decisions on privacy management.

What is included in the Governance Platform Lite features?

From any of our forms (data protection impact assessments, records of processing activity, incident management, and processing operation assessments) risks, issues, lessons, and tasks can be created. The integration between these two platforms allows you to identify, categorise, and monitor privacy-related governance items. For example, risks and issues can be monitored through the integration based on their impact and severity, ensuring that privacy risks are managed effectively and systematically.

How do I upgrade to the Governance Platform from the Lite variation?

For additional information or to request access, please contact [email protected].