I’m solo in-house at a cloud software company (start-up with lots of growing to do). I’ve been here for about a year and my primary role is commercial, but during the quieter times of the year, I’d really like spend time somehow improving our company’s privacy/data protection compliance (bear with me). I know enough about European regulatory requirements, but I’m lacking skills in practical implementation. Would really love any thoughts or practical tips. (Continued in comments)

like
Posting as :
works at
You are currently posting as works at

What do people here suggest I prioritize? I was thinking: a data audit/data mapping exercise, focusing first on teams that handle customer data; working on our vendor intake process so that new processors and sub-processors go through the appropriate legal reviews; and putting together some sort of product checklist in case we build a new feature that changes how we process data.

The challenge I have is lack of resources. I have a good relationship with one of our engineering managers who is happy to help, but his team’s time is also limited, so maybe I need to think even smaller? Any practical suggestions would be really appreciated.

Those are reasonable priorities. Data mapping is an integral first step. You can’t know how to handle much else without at least the framework of a data mapping exercise, if not necessarily all the details.

Are you adopting gdpr as just a company wide standard even for U.S. operations?


1. Understanding what data is collected, ingestion points of that data, how it is used/processed/shared/sold

2. Data inventory/mapping

From there you can focus on building out vendor intake and building out a checklist of sorts.


Would likely need to bring in external resources to assist. Engineering/Tech/Marketing would be a good place to start internally to get the ball rolling on step 1, if you haven’t already.

Knowing your company and where they are and their priorities…What would add most value to the business? What would return the most value to shareholders?

“Dear business partner there are a few ideas I had about how I might help support and accelerate the business. However, I would be grateful to hear how you would appreciate support accelerating the business and how you would appreciate help optimizing technology and data. What areas of friction are you experiencing? What areas are working that we can help you replicate? What do our customers/clients (of various definition) expect? How can I help you meet or exceed those expectations?

Related Posts

What is the notice period if left in probation period?

like

My org will be pausing the Employer match to 401k for a few months. What's the best strategy to optimize my investment at this time?
Ride along/increase or decrease my percentage?

like

I have an offer of 15 Lpa from Nagarro and expecting one from Capgemini around 18-19 maybe with joining bonus as the offer letter is not yet released. Really confused which one to join as Nagarro has a pros of work from anywhere while Capgemini will work on hybrid model. Can anyone please help me in giving some insights .

like
like

Does Bank of America have a car lease policy ? If yes, which band are eligible for the same ?

like

A parent of one of my students told admin she thinks it's irresponsible that I won't be grading over Christmas break. I let the students know to get any work they need graded in before the break and I'll get it to it during our workdays in January. Apparently that's not fast enough for her 🙄. Is it wrong that I'm sort of pissed off by this? Should I say something?

likehelpfulfunnyupliftingsmart

I am joining Deloitte India next week and I have received a mail from the recruitment team that I have assigned with a "Buddy" from Deloitte to help me guide through the beginning.

Is this a normal thing in Deloitte/Big4? What is the significance?

like

After how many years of exp we should join tcs

like

Planning a 10-12 day trip late April / early May. We are looking to spend 3-4 days in a region of Italy and we can’t decide between Cinque Terre and the Amalfi coast. We have the rest of the trip pretty much planned out but are up in the air with these two options. Open to any Pros / Cons or experiences you’ve had!

like

Hi Fishes,

I'm holding 4+ years of experience in .Net/.Net Core, MVC, Web API's, Angular and SQL.

If I switch what should be the expected package?


I'm new here, would be thankful if you can help me to get 11 likes.

like

Advice on taking and passing the SPHR exam?

likehelpful

Anyone have connections in Oklahoma City?

like

A basic Docker Cheat Sheet -

Post Photo
like

My best friend has Celeste!

like

I am tagged to resources pool in Coforge from last 2 months i.e. I am in bench.
Any idea what's the notice period on bench?

Anyone know how much clinical operations managers icu make in hawaii

like

I really want to get a second job but I am scared of losing my current one. Both companies are in same field, although not direct competitors so I know it’s technically “not allowed” however, this is the only way for me to get that $$ since I am not paid all that well.

Of course I won’t tell a single friend/coworker. Only my partner. And I don’t post work stuff on social media.

Realistically what are the ODDS of being caught? Is there a legal/HR process with which they could find out??

like

I’m looking for a salary based “sales job”. Is that possible? Thanks

like

Steve Wozniak isn't afraid to critique Apple devices, and said he couldn't tell the difference between the newly released iPhone 13 and its predecessor, the iPhone 12.

like

👀 We’ve all heard of *DWB, *WWB, *SWB & more.

💡 If you’re consulting while Black, you’re probably aware that situations can arise for us which require careful handling.

💭 It’s helpful to ask questions & get support/answers in a judgement ➕ snark-free environment. So, I invite you to join the Black Consultants Strategies & Tactics bowl

🔍 Use the Fishbowl search function to search “Black Consultants Strategies & Tactics” and request to join today!

*driving, walking, & shopping while black

Post Photo
like

Additional Posts in Privacy Law

Anyone else dying this week 😅

like

Hello, MSL grad student here, looking for externships 🙏

I’m currently doing IR work but would like to do something more on the technical side (ie: more forensics or technical). Does anyone know if forensics firms or any firm that offers a mix ? I have both a Cipp-Us and cyber/ Sec+ certs.

like

Hi all! I’m inclined on taking up the CIPM training and certification exam. I’m already a certified Data Protection Officer in the Philippines. I intend on skipping CIPP as it applies to the US and EU.

How difficult was the exam? Can you share your experience studying for the CIPM exam? Is it advisable to skip CIPP?

Many thanks in advance.

like

Low billable, low pressure work in privacy law? Slowly realizing that as my boys get older, the money isn’t worth what I’m missing out on. Currently a tech litigation associate with lots of hearing, depo and trial experience (I’ve appeared on my own at hearings/depos) at a well respected firm. I have limited privacy experience despite being hired for that reason… Have my CIPM and CIPP/US /E and /C. Remote preferred; hubs is pilot with cool intl transfer opportunities. Money isn’t issue.

funnylike

Can you incorporate SCCs by reference in a DPA?

like

Govt attorney here. Trying to jump into privacy now. In house or big law ? Pros and cons in the world of privacy ?

like

Anyone have any suggestions on how to break into this field as a mid-level commercial litigator? I was thinking of taking the CIPP-US test but would that be enough to get some interview traction?

like
like

What are the best resources you’ve found that walks you through step-by-step, the data incident management process and what to ask your client?

like

In terms of taking the next step to elevate your career- what items are you heavily focusing on? I have speciality in data governance as well as product counseling, but curious to know what others find most helpful in their practice areas.

likehelpful

How did you break into privacy law? What are the pro/con’s?

like

Has anyone been successful negotiating a “breach notification costs” provision in contracts with vendors? What are some good args to include it? I feel like vendors generally flat out say “no”, but I have seen some contracts where vendors were willing to include it and I’m wondering how that happened 😁

like

For anyone who has the CIPP/US certification, how long did you study for the exam?

like

How Much Can You Sue an
Employer for Not Paying You?

like

Anyone take the CIPM recently? How was it?

like

I am preparing for the CIPP/US exam using their official textbook (3rd Ed). If anyone has a good outline, would you be willing to share? I tried to create one myself but it is taking way too long :/ Thanks so much in advance!

like

Any firms/companies hiring in their privacy group? Looking for fully remote or TX

like

Anyone have any CIPP/US practice questions besides the 30 from the IAPP?

like

Can anyone share a salary range for a non-attorney with a JD and 1 YOE handling incident response and contract negotiations?

like

New to Fishbowl?

Download the Fishbowl app to
unlock all discussions on Fishbowl.
That was just a preview…
Sign Up to see all discussions
  • Discover what it’s like to work at companies from real professionals
  • Get candid advice from people in your field in a safe space
  • Chat and network with other professionals in your field
Sign up in seconds to unlock all discussions on Fishbowl.

Already a user?
Login here

Share

Embed this post

Copy and paste embed code on your site

Preview

Download the
Fishbowl app

See what’s happening in your industry
from the palm of your hand.

A phone with Fishbowl app

Scan your QR code to download
Fishbowl app on your mobile

Download app

Sign up for free to view this conversation on Fishbowl

By continuing you agree to Terms of Use and Privacy Policy

Already have an account? Log in

Sign up for free to continue using Fishbowl

By continuing you agree to Terms of Use(New) and Privacy Policy(New)
Messaging rates may apply

Already have an account? Log in

For account settings, visit Fishbowl on Desktop Browser or

General

Legal