A supplier can make a business process easier while adding new places where personal data is stored, accessed, or reused. The privacy assessment therefore needs to examine the proposed service relationship, not…

A lost device, an incorrectly addressed email, and a compromised account create different investigations, but each can raise questions about personal data. During an incident, uncertainty grows quickly when staff…

A record of processing activities should explain how an organization uses personal data. An application inventory alone cannot do that. One customer platform may support billing, marketing, and service delivery,…