Benchmarking and Strengthening Your Privacy Program

Best Privacy Practices and Common Pitfalls to Avoid

DO

Prioritize a phased approach to building a program

• Build a team of privacy professionals, partners, ambassadors and allies
• Support a culture of privacy that seeps into the core of every employee
• Create a privacy framework, including governance model, set of standards, principles, guardrails, and clear roles and responsibilities.

Create an adaptable privacy program to keep up with changing regulations

• Define guiding principles, non-starters, and ground rules
• Focus on the right Key Performance Indicators (KPIs)
• Monitor, test, and evolve your program as needed

Implement ongoing training

• Set up regular communications and awareness modules for specific roles across the company
• Embed privacy into your company culture: use multichannel multimedia to continue training across the organization

DON'T

Treat privacy as a one-off or check-the-box exercise

• Avoid building a program focused on a specific regulation or enforcement action - meeting internal audit standards is not enough
• Walk away from your privacy program once you have built your privacy program
• Assume that a single training is sufficient