Most organizations opting for single data protection strategy
A majority of organizations are adopting a single global data protection strategy to manage evolving legal requirements, and managing the expanding ecosystem of third parties handling data has become a top priority.
Those are among the highlights of new study from security provider TrustArc and the International Association of Privacy Professionals (IAPP), a global information privacy community.
The study is based on a survey of 327 privacy professionals worldwide fielded in the fall of 2019, and showed that 56 percent of respondents across all geographies are working toward a single, global data protection and privacy strategy for data subjects’ rights.
Vendor and third-party risk assessments ranked first among privacy assessments globally, with 78 percent of U.S. respondents reporting that they now conduct them. That figure indicates the growing complexity of the ecosystem now impacting compliant data privacy management, the report said.
A majority of U.S. respondents (79 percent) reported complying with two or more privacy laws, while only 16 percent are focused on just one. European Union (E.U.) respondents were more likely to report actively working to comply with five or fewer privacy laws, while U.S. respondents were more likely than their EU counterparts to be complying with 11 or more laws.