New Mandatory US Data Practice Assessments Explained and Operationalized

Following Europe’s lead, 12 states now, or soon will, require personal data practice assessments be conducted and documented, and be available for inspection (and California is considering mandatory filing requirements). Potential fines for noncompliance could be significant. The risks of other regulated or high-risk data practices like artificial intelligence, children’s data processing and digital health data processing practically necessitate assessments, even when not explicitly required by law. California applies assessment requirements to consumer, B-to-B and HR data, bringing almost all of our clients into scope.

We have teamed with our trusted collaborator, Ankura, Inc., a leading global data privacy and security consultancy, to develop a nearly turnkey data assessment program package that can be customized to client needs, including a version configured for the popular OneTrust platform.

On October 18, along with Ankura, we will co-host a master class on assessments. Learn when they are legally required, or highly advisable, how to gather the necessary information to conduct an assessment and what new US laws require to be considered and documented. We will also explain how to use technology to enable assessments to keep data inventories live, making it easier to manage data assets, maintain accurate transparency notices and to quickly, efficiently and effectively respond to data subject rights requests. We will demonstrate an integration of the assessment program using the OneTrust platform.

There will also be an opportunity to ask the panel questions about assessment best practices and new legal requirements.

Please note, registration for this event is being handled by Ankura, Inc.