A successful privacy program obviously includes cross-functional communication and collaboration. What players need to be present?
Sort By:
Oldest
AI LegalTech Counsel & Legal Ops Innovation Leader | Digital Transformation Expert | Strategic Advisor in Services (non-Government)a year ago
The (Chief) Privacy Officer, the Data Protection Officer (if there is one), and definitely members/representatives from Legal, IT, Compliance, HR, and Executive Leadership.Chief Privacy Officer in Finance (non-banking)a year ago
CISO, vendor management, and procurement are essential to have onboard. An enterprise data officer or data officer/data governance team is also helpful since they know the systems architecture. An internal business auditor is also beneficial because you need help to plug into compliance/audit. If you can plug some privacy compliance questions into the audit of affiliates of specific departments, that's always a win. Boards are also quite important, as they are part of the program and often informed, so you rely on them to decide on the risk appetite. The privacy team cannot decide on the risk level alone. They can align the risks, advise on them, and build the mitigations, but they cannot be the sole ones deciding on initiatives like diversity and inclusion, for instance. You need to include some less apparent stakeholders in the discussion. Take the corporate communications team- if there is a breach somewhere, it can be easier to post a website announcement rather than send out emails. Human resources are important for training capacities. On another level, your employees need to be included. At the end of the day, everybody needs to be participating in the privacy program in order for it to be successful.