Build a Data Privacy Program
Take out data privacy’s grey areas with a quantitative approach to your program.
- Data privacy has become a baseline business expectation, regardless of company size or industry.
- With a multitude of regulatory frameworks to consider, business and IT leaders find themselves scrambling to ensure that all bases are covered when it comes to data privacy.
Our Advice
Critical Insight
- Take a quantitative approach to data privacy.
- Use metrics and a risk-based approach to drive a privacy framework that not only supports compliance but also considers the custom needs of your organization.
Impact and Result
- Sell privacy to the business by speaking a language they understand. IT and InfoSec leaders need to see privacy as not just compliance but also a driver of business efficiency.
- Integrate and build by developing a program that:
- Promotes freedom of information and access to this information.
- Establishes privacy and security standards with respect to access of this information.
On Demand
Webinar
Reduce Risks With a Quantitative Approach to Privacy Compliance
Play WebinarMember Testimonials
After each Info-Tech experience, we ask our members to quantify the real-time savings, monetary impact, and project improvements our research helped them achieve. See our top member experiences for this blueprint and what our clients have to say.
8.4/10
Overall Impact
$71,412
Average $ Saved
43
Average Days Saved
Client
Experience
Impact
$ Saved
Days Saved
County of Los Angeles, CA - Department of Public Works
Guided Implementation
10/10
$134K
10
Government of Bermuda
Workshop
8/10
$68,999
10
Best - to see that we have actually made progress Worst - the feeling that we still are trying to get answers on some of the same questions
Interfaith America
Guided Implementation
9/10
$13,600
32
Best: we learned a lot of what we did not know about data privacy. Worst: the material seemed more complex than what we need. I'm wondering if t... Read More
ProDriven Global Brands
Guided Implementation
5/10
N/A
N/A
Probably not fair to rate this, as we have pivoted internally.
The Boyd Group Inc.
Guided Implementation
10/10
$68,500
120
Witt/Kieffer Inc.
Guided Implementation
10/10
$5,199
5
As usual Alan helped align my direction. His advice is very much appreciated.
Centennial College
Guided Implementation
10/10
$47,500
50
Best is the use of the existing blueprints that I can re-use and support received
Opentech Alliance
Workshop
10/10
$649K
60
Partner with other software solutions to have a repository of where to store the information gathered that is more dynamic than using spreadsheets ... Read More
Environmental Defense Fund, Incorporated
Workshop
10/10
$97,499
60
This was my first experience attending a workshop faciliated by InfoTech. I really enjoyed the workshop. I thought the faciliator (Alan Tang) did a... Read More
Packaging Machinery Manufacturers Institute
Guided Implementation
10/10
$6,499
2
Helmerich & Payne, Inc.
Guided Implementation
10/10
$2,469
5
Sage Therapeutics
Guided Implementation
10/10
$31,499
20
Iris is knowledgeable, friendly and experienced. I am pleased to have had the opportunity to connect with her and consider her an ally on all thing... Read More
Bermuda Monetary Authority
Guided Implementation
10/10
$62,999
50
Feeling assured that Alan and InfoTech have the expertise to review our drafts and provide constructive feedback as and when needed that we can act... Read More
Regional Transportation District
Workshop
10/10
$37,799
120
I'm not sure how you put a monetary value on this. I believe that while you can value staff time, it is hard to put a value on the effects of deve... Read More
Donor Network West
Guided Implementation
10/10
$37,799
14
Alan really knows the Privacy law arena and is invaluable in the guidance that he gives. I leave each session feeling like I have a good handle on ... Read More
Florida State College at Jacksonville
Workshop
10/10
N/A
50
The workshops get the work done much faster and gets everybody on board with what needs to be done.
Bermuda Monetary Authority
Guided Implementation
9/10
$62,999
50
Post workshop having Alan available to call and offer guidance and expertise has been great, he is a guide and a sounding board, offering practical... Read More
Bermuda Monetary Authority
Guided Implementation
9/10
$62,999
20
Alan is great, he provides guidance that I can actually apply. I look forward to engaging further with Alan.
State of South Dakota Bureau of Information and Telecommunications
Guided Implementation
8/10
N/A
N/A
Incredibly valuable guidance on our Privacy Operations roadmap! Still too early to estimate the time and financial impact but we anticipate it will... Read More
KIND
Guided Implementation
9/10
$31,499
10
Marquette University
Guided Implementation
9/10
N/A
N/A
Alan, was very knowledgeable and provided good insight. His follow through was outstanding. At this point, it is difficult to determine how much ... Read More
Government of Bermuda
Workshop
8/10
$1.17M
20
Best - getting so much done in only a few days while still allowing everyone to express concerns, opinions, advice, and even frustrations. Worst... Read More
Wiss, Janney, Elstner Associates, Inc.
Guided Implementation
10/10
$29,609
20
Alan is awesome - he helped to establish our roadmap that gives us a trajectory to succeed. I truly appreciate Alan's help!
Beckman Coulter, Inc.
Guided Implementation
10/10
$31,499
N/A
While still new on approach and hard to estimate, I can see value already.
Metropolitan School District of Lawrence Township
Guided Implementation
10/10
$2,519
5
Understood our challenges and was able to provide actionable data to back future discussions.
Helmerich & Payne, Inc.
Guided Implementation
10/10
$2,393
5
Colorado Housing And Finance Authority
Workshop
9/10
N/A
14
Best: Opportunity to have conversations with our Exec team and key staff on privacy related topics with the expertise of Alan Tang delivering key ... Read More
Packaging Machinery Manufacturers Institute
Guided Implementation
9/10
$12,599
2
Platte River Power Authority
Workshop
10/10
$37,400
100
The best part of the workshop is the roadmap to a data privacy program. In addition, although the resources are available for a self-guided impleme... Read More
OCM Boces / Central New York Regional Information Center
Guided Implementation
8/10
N/A
N/A
Best - learning that such a credentialed expert was part of the Info-Tech team and accessible to us for guidance. Also best - Actual guidance! ... Read More
Privacy Program Management
Participants will gain a comprehensive understanding of privacy management, including how to collect privacy requirements, conduct a privacy gap analysis, build a privacy roadmap, and implement and operationalize privacy practices.
- Course Modules: 5
- Estimated Completion Time: 8 hours
Workshop: Build a Data Privacy Program
Workshops offer an easy way to accelerate your project. If you are unable to do the project yourself, and a Guided Implementation isn't enough, we offer low-cost delivery of our project workshops. We take you through every phase of your project and ensure that you have a roadmap in place to complete your project successfully.
Module 1: Collect privacy requirements
The Purpose
- Understand the key drivers behind privacy in your operating context and begin to assign ownership.
Key Benefits Achieved
- Level-setting between IT and the business with respect to privacy best practices.
- High-level understanding of risk associated with personal data collected by the organization.
Activities
Outputs
Define and document program drivers.
Establish privacy governance structure and define scope.
Build the Privacy RACI.
Build the risk map.
- Business context and drivers behind privacy program
- Privacy RACI chart
Module 2: Conduct a privacy gap analysis
The Purpose
- Connect with each of the business units with respect to current privacy practices and gain insight into how personal data is handled throughout the organization.
Key Benefits Achieved
- Alignment with business unit privacy champions
- Understanding of current state of privacy in the organization
- Uncovered gaps in the organization’s privacy practices
Activities
Outputs
Conduct interviews and complete Data Process Mapping tool.
Compare compliance and regulatory requirements with current privacy practices of the organization.
Identify gap areas.
Review the DPIA process and identify whether threshold assessment or full DPIA is required.
- Data Process Mapping tool draft
- Mapped privacy control gap areas to relevant privacy laws, frameworks, or industry standards
- Optional: Walkthrough of DPIA tool
Module 3: Build the privacy roadmap
The Purpose
- Ensure that the privacy program is functional and caters to the environment assessed over days 1 and 2 by building a custom-fit privacy initiative implementation roadmap.
Key Benefits Achieved
- Quantitative prioritization of each of the privacy gap closing initiatives
- High-level initiative implementation roadmap
Activities
Outputs
Complete business unit gap analysis; consolidate inputs from Day 2 interviews.
Apply variables to privacy initiatives.
Create a visual privacy roadmap.
Define and refine the effort map; validate costing and resourcing.
- Privacy Framework Tool
- Privacy Roadmap and prioritized set of initiatives
Module 4: Implement and operationalize
The Purpose
This portion of the workshop ensures that the privacy program can be put into action and moves beyond static policies to foster the integration of privacy metrics across the organization.
Key Benefits Achieved
A full set of privacy metrics, as well as tactics to implement and monitor on an ongoing basis.
Activities
Outputs
Review Info-Tech’s privacy metrics and select relevant metrics for the privacy program.
Operationalize metrics.
Input all outputs from days 1-3 into the Data Privacy Report.
Summarize and build an executive presentation.
Set checkpoints and drive continuous improvement.
- Completed Privacy Roadmap
- Completed Data Process Mapping tool
- Review of any outstanding privacy collateral (Privacy Notice, Data Protection Policy, etc.)
- Privacy Program Report document
On Demand
Webinar
Reduce Risks With a Quantitative Approach to Privacy Compliance
Play Webinar
About Info-Tech
Info-Tech Research Group is the world’s fastest-growing information technology research and advisory company, proudly serving over 30,000 IT professionals.
We produce unbiased and highly relevant research to help CIOs and IT leaders make strategic, timely, and well-informed decisions. We partner closely with IT teams to provide everything they need, from actionable tools to analyst guidance, ensuring they deliver measurable results for their organizations.
What Is a Blueprint?
A blueprint is designed to be a roadmap, containing a methodology and the tools and templates you need to solve your IT problems.
Each blueprint can be accompanied by a Guided Implementation that provides you access to our world-class analysts to help you get through the project.
Need Extra Help?
Speak With An Analyst
Get the help you need in this 4-phase advisory process. You'll receive multiple touchpoints with our researchers, all included in your membership.
Guided Implementation 1: Collect privacy requirements
- Call 1: Scope requirements, drivers, objectives, and challenges.
- Call 2: Build out privacy ownership using the RACI chart.
Guided Implementation 2: Conduct a privacy gap analysis
- Call 1: Review results of data process mapping business unit interviews.
- Call 2: Delve into the Privacy Framework Tool to identify and evaluate gaps.
Guided Implementation 3: Build the privacy roadmap
- Call 1: Determine cost and effort ratio of gap initiatives.
- Call 2: Build out additional privacy collateral (notice, policy, etc.).
Guided Implementation 4: Implement and operationalize
- Call 1: Review standard privacy metrics and customize for your organization.
- Call 2: Establish and document performance monitoring schedule.
Contributors
- Alan Tang, Security Professional
- Salvador Barragan, Director of Records & Information Governance, Pekin Insurance
Privacy by Design for Digital Marketing
Build a Data Privacy Program
Mature Your Privacy Operations
Fast Track Your GDPR Compliance Efforts
Secure Your High-Risk Data
Ensure Your Pandemic Response Plan Is Privacy-Proof
Comply With the California Consumer Privacy Act
Build an Effective Data Retention Program
Demonstrate Data Protection by Design for IT Systems
Tech Trend Update: If Digital Ethics Then Data Equity
Conduct an AI Privacy Risk Assessment
Prepare for PCI DSS v4.0
Comply With the California Privacy Rights Act
Comply With 2023 US Privacy Laws (Virginia, Connecticut, Utah, Colorado)
Master Certificate Lifecycle Management
