GDPR privacy by design and privacy standard operating procedures

View all episodes of the "KPMG Privacy" video series.

Transcript

Steve:

• Welcome and thank you for watching KPMG’s privacy video series.
• This video will identify key documentation requirements necessary for privacy compliance and risk management.

Austyn:

• Typically, during our analysis, we find the following out of date or non-existent with respect to GDPR:
  • Data inventory
  • Vendor management assessments
  • Data Protection Impact Assessment
  • Consent management
• You need to work with stakeholders to understand existing processes supported by documentation, and consolidate processes into a standard approach where possible.
• Evaluate opportunities to automate, such as data scanning, DPIA management and consent management tools.
• Develop standard operating procedures that leverage new or updated documentation and achieve privacy compliance and risk management goals.

Steve:

• Please stay tuned for the final video in the set focused on sustaining GDPR efforts.
• Thanks for watching.