非AI驱动的自动化隐私管理：专家指导实践.pdf

1、Autopilot without AI:A Managed Privacy Program with Expert GuidanceRyan ParleyAssociate General Counsel,JCPenneyAnita PadmanabhanPrivacy and Commercial Counsel,Axiom Global Inc.Abhi MukundanCIPM|CIPT,Founder and Sr.Privacy Advisor at SolvationWelcome and IntroductionsI.Presentation FormatII.The Priv

2、acy ProgramIII.Q&AAgenda OutlinePresentation FormatChallengesAntidotesPeople/Process/TechnologyHoodathunk!The Privacy ProgramPrivacy RightsVendor Governance(TPRM)Data Map&Records(ROPA)Privacy OperationsPrivacy by Design(PbD)Notices,Policies&ConsentIncident Management&Audit FindingsTraining&Awareness

3、The Privacy ProgramPrivacy RightsVendor Governance(TPRM)Data Map&Records(ROPA)Privacy OperationsPrivacy by Design(PbD)Notices,Policies&ConsentIncident Management&Audit FindingsTraining&AwarenessPrivacy RightsLowest Common Denominator vs.Most StringentManual vs.AutomatedHighest Risk vs.Quick WinProce

4、ssPeopleTechnologyProcessTechnologyMultiple-law SyndromeFulfillment ApproachDefensibilityPrivacy Rights Hoodathunk!Opted Out In Huh?Vendor GovernanceDemocratic vs.AutocraticOne-shot Deal vs.Piece-mealDirect vs.IndirectRallying the TroopsMSA,SOW,DPA,Exhibits,Ugh!Coulda,Shoulda,WouldaPeopleProcessTech

5、nologyProcessTechnologyProcessTechnologyVendor Governance Hoodathunk!Done!Um not yet.Data Map&RecordsBlank Slate vs.Organizational Know-howBig Chomp vs.Easy does itSolo vs.PartnershipWhere do we start?Eating that ElephantMaking them listenPeopleProcessTechnologyProcessTechnologyPeopleProcessTechnolo

6、gyData Map&Records Hoodathunk!Response is missing!Privacy OperationsIn-house vs.OutsourcedDistributed vs.Collective ConscienceAd Hoc vs.OptimizedWhom shall I send?Whats this again?But we did this already!PeopleProcessProcessTechnologyPeopleProcessTechnologySwi