Privacy Rights Automation Overview

Introduction to Privacy Rights Automation

Responding to privacy rights requests is a time-consuming process full of manual tasks, making it a challenge to comply with global regulatory requirements. As individuals become more aware of their rights and businesses rely more heavily on the processing of personal data to create value, fulfilling these tasks manually is no longer a scalable solution for any organization. Each new regulation introduces new complexity to the definition of data subjects adding complexity to privacy rights fulfillment processes. Eliminate the most manual and time-consuming components of privacy rights workflows.

OneTrust’s Privacy Rights Automation solution enables organizations to automate every phase of the consumer request process including intake, identity verification, data discovery, deletion, data redaction and secure response. In combination, businesses can ensure fulfillment accuracy, improve response times, and scale their program when volume of requests increases.

Privacy Rights Automation is part of the Privacy & Data Protection cloud with OneTrust. To learn more, see the Privacy Rights Automation knowledge base.

Module Benefits:

  • Deliver the right intake experience with pre-built templates informed by the largest database of regulatory research and geotargeting to validate data subject's location

  • Enable subjects to attach evidence when submitting a request to verify their identity and proof of residency

  • Leverage various identity validation approaches, including email, phone, login portals or security questions

  • Instantly discover, delete, rectify, or otherwise action a requestor’s data across all relevant systems – no manual tasks required

  • Automate the redaction of emails and files

Problems Solved by Privacy Rights Automation:

Regulatory Compliance

Automate the nuanced timelines and requirements across GDPR, LGPD, CPRA and hundreds more

Remove Manual Tasks

Fully automate manual tasks associated with request fulfilment through automated data discovery and robotic automation technology

Satisfy All Request Types

: Automate all requests in a single platform, whether from a consumer or an employee, a request for access or deletion

Typical Users

Admins or key users of Privacy Rights Automation would report to or have the following titles:

  • Data Protection Officer

  • Chief Information Officer

  • Chief Risk Officer

  • Chief Compliance Officer

  • Chief Ethics & Compliance Officer

  • Chief Legal Officer

  • Chief Privacy Officer

  • Chief Data Officer

Privacy Rights Automation (DSAR) Module Terminology

Terminology

Terminology Context/Definition

Web Forms

Defines what data collection of specific audiences, request types, and collection parameters in scope for requests.  Webforms can also be integrated with the organization's privacy policy to collect and automate requests

Subtasks

Actions within a request to ensure tracking and accountability. These subtasks can be required or not for a workflow to progress through stages to ensure all actions are completed.

Framework Examples

OneTrust Privacy Rights Automation provides a solution that can help organizations fulfill the requirements to comply with many frameworks and certifications. Below is a list of some of the popular privacy frameworks that this module can help with.

Framework

Framework Description

GDPR

The GDPR is the strongest global privacy law in effect today. Created by the European Union (EU) to regulate how organizations collect, handle, and protect personal data of EU residents. It also defines eight data subject rights that guarantee specific entitlements for individual’s personal data. Ultimately giving individuals more autonomy over their personal information and how it is used.

Note:

To learn more about the GDPR Framework, read our blog post here.

LGPD

Brazil passed its General Personal Data Protection Law (LGPD) in 2018. The legislation establishes and protects the rights and freedoms of individuals and provides increased transparency to covered data subjects. The law contains unique definitions of personal data and their authorized uses that count on enforcement by the Brazilian Data Protection Authority (ANPD).

Similar to the GDPR, the LGPD, or Lei Geral de Proteção de Dados, applies to the processing of data by organizations within Brazil, but also to organizations outside Brazil under certain circumstances. LGPD compliance provides significant benefits to data subjects who will be afforded new rights.

Note:

To learn more about the LGPD Framework, read our blog post here

CCPA

CCPA compliance means that covered businesses – for-profit entities that fall under the scope of the CCPA – can demonstrably meet obligations set out under the CCPA, including a range of new consumer rights, a new definition of personal information, and new concepts of businesses and service providers in relation to the roles of controller and processor.

Note:

To learn more about the CCPA Framework, read our blog post here.

Relationship in OneTrust Platform

Privacy Rights Automation can integrate with other OneTrust modules to enable enhanced features:

Data Discovery

: Allows users to add one or more data points that are hosted offline either in physical form or by systems that don’t support automated discovery before sharing results with a data subject.    To learn more, read the articlehere.