Organisations often struggle to identify areas of policy or practice that present risks to privacy. We conduct a high level review of your organisation’s privacy program (either as a whole, or in relation to a particular concern, product, policy or process you have raised) and suggest opportunities for improvement.

It is imperative that all new programs (“information technology”-based or otherwise) that involve the collection, storage, use or disclosure of personal information are assessed for impacts on privacy. This is a formal process that should occur as early as possible in program development. A PIA involves:

• understanding what happens to personal information at all stages of its lifecycle
• identifying privacy risks
• addressing privacy risks to the greatest extent possible before the program “goes live”

By considering privacy at the outset of any program, process, policy or procedure, organisations have the ability to address potential privacy risks before they arise. This assists in building a strong privacy culture while also limiting instances of needing to tackle privacy issues after-the-fact (which can be costly and potentially damaging to an organisation’s reputation).

Organisational compliance programs are enhanced by having the privacy essentials in place. We can assist you to create or revise relevant policy and procedure documents, including:

• Privacy Policy
• Cookie Policy
• Data Breach Notification
• Consent Management
• Complaints Management

Organisations collect personal information in a variety of ways for a number of business purposes. It is imperative that adequate information is given to individuals who are supplying their personal information – by way of a “privacy notice” or other mechanisms. In some cases, consent must be sought before organisations can collect personal information. We can assist with compliance in this area.