TrustArc Blog

Hilary Wandall, GC and Chief Data Governance Officer at TrustArc, Talks GDPR on KTVU

May 30, 2018

Last week, TrustArc General Counsel and Chief Data Governance Officer, Hilary Wandall, spoke with KTVU’s Gasia Mikaelian to discuss the changes surrounding the GDPR which went into effect last Friday, May 25th. From inboxes being flooded with privacy policy updates to the impact to retail businesses – there was a lot to discuss. The GDPR has gained a ton of attention recently as consumers’ inboxes have been packed with emails from companies concerning their privacy policies.  While some of these emails may require an action on behalf of the consumer, Hilary noted that most of these emails are simply outlining … Continue reading Hilary Wandall, GC and Chief Data Governance Officer at TrustArc, Talks GDPR on KTVU

IAPP & TrustArc Help Companies Address GDPR Training Requirements

May 29, 2018

TrustArc will now offer the International Association of Privacy Professionals’ (IAPP) Privacy Core® GDPR Essentials training, an online e-learning solution designed to train employees on privacy fundamentals and to enable companies to meet the GDPR employee training requirement in a scalable, effective manner. Investing in training can help meet GDPR requirements, and it is a best practice too. This training course helps fulfill at least two GDPR Articles’ requirements that explicitly call out training, Article 39 and Article 47. Additionally, all staff can benefit from learning about data protection. Thus, it is no surprise that IAPP & TrustArc research found that … Continue reading IAPP & TrustArc Help Companies Address GDPR Training Requirements

One Week to Go: Are you Ready for May 25th? – Webinar Recap

May 22, 2018

As part of the TrustArc Privacy Insight Series Webinars, Paul Iagnocco, Consulting Director & Senior Privacy Consultant at TrustArc, presented “One Week to Go: Are you Ready for May 25th?”  This blog post will give a brief summary of that webinar; you can listen to the entire webinar and download the slides here. In this webinar Paul addressed the questions companies are facing  as the May 25th GDPR deadline approaches: Is my company compliant? What if we are not 100% compliant? What happens next?  This webinar focused on four main areas as they apply to the GDPR: compliance status, enforcement, … Continue reading One Week to Go: Are you Ready for May 25th? – Webinar Recap

GDPR Applicability – Three Examples You Should Know About

May 15, 2018

  As the GDPR compliance deadline approaches, we have seen companies assess their readiness and prioritize the areas that need additional processes, technology, and controls. While helping companies to prepare, we have seen several companies’ interpretations around GDPR applicability. The following three common scenarios highlight a few misconceptions around GDPR applicability. This blog post will discuss those misconceptions, and suggest a few things to consider in your company’s GDPR applicability analysis. Example 1 The Scenario We’ve heard the belief that GDPR does not apply to personal data obtained from public sources that is not collected directly from the data subject, … Continue reading GDPR Applicability – Three Examples You Should Know About

GDPR Compliance – Consent Requirements under the GDPR – Marketing Activities

May 04, 2018

Companies that must comply with the GDPR should take a close look at their marketing processes to ensure that they will meet GDPR requirements. The following three examples are key places where most companies should take another look at their processes with regard to GDPR consent requirements. Marketing Outreach Email Programs Most companies’ marketing departments have outreach programs where a large database of clients and prospects are sent emails with information about new products or services. If individuals have unsubscribed, opted out, or otherwise indicated their desire that your organization stop using their personal information, your organization may not contact … Continue reading GDPR Compliance – Consent Requirements under the GDPR – Marketing Activities

May Event Spotlight: TrustArc GDPR Privacy Workshop, Institute on Privacy and Data Security Law Conference, Executive Leaders Network, Euroforum, TrustArc Privacy Insight Series, EuroCACS 2018 an ISACA Event

May 01, 2018

  TrustArc GDPR Privacy Workshop May Paris, St. Louis, Boston, Frankfurt & San Francisco The GDPR Privacy Workshops are free events that feature informative guidance, peer discussions and practical solutions to achieve GDPR compliance. Topics discussed will include Data Mapping, Records of Processing Activities, Article 30 Reports, DPIAs / PIAs, Article 35 Reports, Individual Rights Management, GDPR HR Data Considerations, and GDPR Technology Solution & Tool Demonstrations. > Reserve your seat to a May GDPR Privacy Workshop today _____________________________________________________________________________________ Nineteenth Annual Institute on Privacy and Data Security Law Conference May 7-8 San Francisco This program focuses on the current critical … Continue reading May Event Spotlight: TrustArc GDPR Privacy Workshop, Institute on Privacy and Data Security Law Conference, Executive Leaders Network, Euroforum, TrustArc Privacy Insight Series, EuroCACS 2018 an ISACA Event