State privacy laws already require, or will soon require, companies to carry out assessments – referred to as data protection assessments, risk assessments or DPIAs. These requirements extend to “high risk” activities or those that involve a “heightened risk of harm,” including, in most cases, targeted advertising, sale of personal data and processing sensitive data, among other things. The Colorado Privacy Act and proposed regulations under the California Consumer Privacy Act (CCPA) lay out detailed content requirements that companies must follow, including requiring significant input from both internal teams and external stakeholders, such as vendors and other recipients of personal data. In addition to prescriptive content requirements, businesses should also be aware of regulators’ ability to request copies of assessments under the state privacy laws, and the proposed CCPA regulations that would require businesses to file certifications of compliance and abridged versions of their assessments with the California Privacy Protection Agency.
Join us for a webinar in which we will:
Discuss privacy assessment requirements and risks
Carry out a mock assessment exercise, walking through the completion of various aspects of a privacy assessment, focused on use cases involving targeted advertising and the sale of personal data
Touch on available resources that you can use to carry out assessments more efficiently and effectively