General Data Protection Regulation (GDPR) Readiness
GDPR goes into effect in May of 2018, reaching across EU borders to impact organizations processing personal information of EU residents, no matter where those organizations are located.
Now is the time to start your preparations to operate under GDPR. Tueoris has the professionals and the hands-on experience to help you establish and operationalize a program that meets both GDPR requirements and your business needs. From assessing the current state of your privacy program, to creating a roadmap toward May 2018, and through to operationalizing required components, our professionals will get your business positioned to meet GDPR compliance obligations.
International Data Transfer Strategy and Solutions
Data Transfer Strategy Development
Tueoris’ practitioners understand that the movement of personal information across international borders carries significant regulatory obligations and risks. Developing a strategy for cross-border transfers and compliance requires not only a clear understanding of the flow of data, but also the applicable regulations and available solutions. Determining whether to rely on Consent, Model Contracts, Privacy Shield, or Binding Corporate Rules can be a confusing exercise. Tueoris applies detailed analysis of data flows and business needs, in order to assist organizations in developing effective strategies that optimize the use of personal information in line with applicable legal, regulatory and industry requirements.
Privacy Shield Readiness and Certification Support
The Privacy Shield Framework provides businesses with a mechanism to meet EU data protection requirements when transferring personal information about EU residents from the EU to the US.
Tueoris provides the expertise to assist your organization in preparing to meet the Privacy Shield Principles and certify with the Department of Commerce for the Privacy Shield program. We’ve assisted early Privacy Shield adopters in preparing for certification by developing and operationalizing processes that meet the Principles (Notice; Choice; Accountability for Onward Transfer; Security; Data Integrity and Purpose Limitation; Access; and Recourse, Enforcement and Liability).
Privacy Program Development
For organizations seeking support in standing up a privacy program, Tueoris can help with full privacy program development and support. Our services range from affordable “privacy in a box” packages of templatized program documentation, to provision of full support in developing and operationalizing robust privacy programs designed to meet business needs and limit risks associated with the collection and processing of personal information.
Understanding the flow of personal information throughout its lifecycle within your business processes is a critical component of meeting your obligations to protect the privacy rights of those who entrust your organization with information about them and to meet regulatory requirements. Our mapping of data flows generates visual depictions of data flows which facilitates the application of appropriate controls to the data and transfers, demonstrates due diligence to regulators.
Tueoris uses a highly efficient methodology to create data maps that will provide your internal and external stakeholders with the information they need to manage personal information and associated risks.
Your privacy policies and procedures are only as good as the adoption by your employees. Tueoris provides training that effectively communicates not only the actions your employees must take when handling personal information, but also the reasons driving the required behavior.
Our training services range from developing customized enterprise training content to the delivery of standalone modules that cover a full range of privacy and data protection rules, regulations and enterprise program requirements. As required to meet the unique needs of your business and employees, we will provide training experts to deliver live onsite training or provide online training modules that can be viewed on an on-demand basis.