Privacy Notice Management Overview

Introduction to Privacy Notice Management

Global privacy laws like the CCPA and GDPR have created many challenges for organizations trying to manage privacy policies, notices and disclosures throughout their digital channels. The complexity of maintaining internal and external policies across teams, privacy regulations, geographical regions, languages and digital platforms has become unscalable for businesses of all sizes.  Companies need to be able to identify web forms, policies and disclosures that exist across their digital properties and update and publish them within specific time periods to adhere to the range of global privacy regulations. The Privacy Notice Management solution simplifies the complex process of creating, updating, and monitoring policies across websites and applications into one central location while eliminating the need for complex development work.

Privacy Notice Management helps organizations eliminate the manual processes of identifying and tracking policies across their websites and apps and allows businesses to display unique policies based on the geographical region and regulations specific to the visitor’s location. Businesses can also enable policies with multilingual capabilities to display in local languages based on browser preferences. The Privacy Notice Management solution enables organizations to centrally manage and update policies across their digital assets while eliminating the need for custom coding and manual backend development processes.

Privacy Notice Management is part of the Privacy & Data Protection cloud with OneTrust. To learn more, see the Privacy Notice Management knowledge base.

Module Benefits:

  • Design, upload and host policies and notices

  • Integrate with websites and applications

  • Build an inventory of current policy lists and where they are linked on websites

  • Create a single policy and scale across 100+ languages with multilingual capabilities

Problems Solved by Privacy Notice Management:

Manage and Monitor Policy Updates and Versions

: Maintain version control, with version history logs with granular details of changes for recordkeeping.

Maintain Consistency

: Identify and monitor policies on a regular basis for consistency across websites and applications

Minimize Development Work

: Easily generate unique scripts for your policies across your digital channels

Typical Users

Admins or key users of Privacy Notice Management would report to or have the following titles:

  • Data Protection Officer

  • Chief Information Officer

  • Chief Risk Officer

  • Chief Compliance Officer

  • Chief Ethics & Compliance Officer

  • Chief Legal Officer

  • Chief Privacy Officer

  • Chief Data Officer

Privacy Notice Management Module Terminology

Note:

Please note that “Policy & Notice Management” is a legacy version of the Privacy Notice Management module.  The terminology below is based on the current Privacy Notice Management module.  If you are on the legacy Policy & Notice Management module and would like to upgrade, please reach out to your Account Manager.

Privacy Notice Management Terminology

Terminology Context/Definition

Privacy Notices

Notify users of specific changes within the privacy space. This can be built from scratch or using templates from common standards and frameworks.

Framework Examples

OneTrust Privacy Notice Management provides a solution that can help organizations fulfill the requirements to comply with many frameworks and certifications. Below is a list of some of the popular privacy frameworks that this module can help with.

Framework

Framework Description

GDPR

The GDPR is the strongest global privacy law in effect today. Created by the European Union (EU) to regulate how organizations collect, handle, and protect personal data of EU residents. It also defines eight data subject rights that guarantee specific entitlements for individual’s personal data. Ultimately giving individuals more autonomy over their personal information and how it is used.

Note:

To learn more about the GDPR Framework, read out blog post here.

CCPA

CCPA compliance means that covered businesses – for-profit entities that fall under the scope of the CCPA – can demonstrably meet obligations set out under the CCPA, including a range of new consumer rights, a new definition of personal information, and new concepts of businesses and service providers in relation to the roles of controller and processor.

Note:

To learn more about the CCPA Framework, read our blog post here.

LGPD

Brazil passed its General Personal Data Protection Law (LGPD) in 2018. The legislation establishes and protects the rights and freedoms of individuals and provides increased transparency to covered data subjects. The law contains unique definitions of personal data and their authorized uses that count on enforcement by the Brazilian Data Protection Authority (ANPD).

Similar to the GDPR, the LGPD, or Lei Geral de Proteção de Dados, applies to the processing of data by organizations within Brazil, but also to organizations outside Brazil under certain circumstances. LGPD compliance provides significant benefits to data subjects who will be afforded new rights.

Note:

To learn more about the LGPD Framework, read our blog post here