Leveraging Independent Accountability to Enhance Privacy Tech in Your Compliance Strategy

Jun 24, 2021 by Bryant Fry, Deputy Director, Privacy Initiatives - Operations

No matter the size of your business, making data privacy a priority is a key component of maintaining the trust of your customers, investors, and the public at large. Today’s economy increasingly requires using systems that process data from around the world, even if you do not yet sell or operate outside the country where you are headquartered. 

To assist businesses in complying with the proliferation of differing privacy laws both in the United States and globally, privacy technology platforms have grown exponentially. Everything such as assessment managers, data mapping solutions, data subject request solutions, consent managers, deidentification/pseudonymity solutions, incident response solutions, privacy information managers, and website scanning services have all become common tools. 

These tools are critical, however deploying the right privacy tech solutions can only get you part of the way in achieving a successful compliance strategy. Once you select the right tech solution, the next step is to demonstrate to your stakeholders your business’ accountability – and commitment -- to its privacy policies and practices. 

Many forward-thinking business leaders turn to accountability markers like third-party privacy certification that can verify that your practices are, in fact, in accordance with recognized standards, while at the same time helping your privacy strategy remain interoperable with a variety of legal regimes. 

These privacy certifications, such as those offered by BBB National Programs, not only help make global privacy best practices achievable by businesses of any size, but they can be a great value, as the costs of pursuing certifications and other accountable privacy practices pale in comparison to the potential costs of regulatory action, the odds for which increase when businesses don’t pay attention to privacy.

Similarly, independent dispute resolution for customers with privacy complaints provides a second layer of trust, providing consumers with a responsive redress mechanism that sets your customer service apart. This type of mechanism is also mandated by international frameworks like APEC and Privacy Shield and is suggested by emerging legislation in Virginia and Colorado.

And don’t forget about the impact your vendors or partners can have on your business reputation for privacy. Third party certifications work here as well. Instead of dedicating internal resources to vet your contractors, ask your potential vendors to secure trustworthy third-party privacy certifications. Here are a few tips:

  • Look for services and mechanisms like our APEC Privacy Certification Programs and our Vendor Privacy Program
  • Use standardized contractual requirements to hold your business partners to the same standards and trusted best practices you expect of yourself.
  • Consider using independent dispute resolution procedures as part of those requirements. 

 

Once you know who touches your data and where that data is stored, it is up to you to conduct ongoing due diligence to make sure your partners treat it consistent with your standards, practices, and public statements.

Privacy technology platforms can provide helpful utility to document your privacy practices and to automate compliance. In an environment where global privacy regulations are actively shifting, in addition to relying on technology, maintaining a robust privacy program that demonstrates best practices such as accountability and transparency will go a long way toward minimizing the scrutiny of consumers and government agencies.

Our role at BBB National Programs as an independent provider of privacy certifications, assessments, and dispute resolution is to help companies confidently demonstrate that their privacy practices are built upon the principles that form the building blocks for global privacy standards.

We can help make privacy achievable and accountable for businesses of all sizes. Reach out to GlobalPrivacy@bbbnp.org to get started.

Suggested Articles

Blog

What to Know About the North Carolina Lemon Law

Next in our blog series reviewing the state lemon laws is the Tarheel State – North Carolina. In this series, we break down what the lemon law does and does not cover in each state because although there is a federal lemon law, called the Magnuson-Moss Warranty Act, states also have their own laws to help consumers who purchase defective vehicles.
Read more
Blog

Top 10 Reasons to Resolve Lemon Law Disputes with BBB AUTO LINE

If your vehicle is still under warranty and you have an issue that the dealership has been unable to resolve, you may be able to reach a resolution directly with the manufacturer – at no cost to you - through BBB AUTO LINE. We have assembled a list of ten ways BBB AUTO LINE provides optimal resolution solutions.
Read more
Blog

What to Know About the New York Lemon Law

As we continue our blog series reviewing state lemon laws, we turn our attention to New York State. True to its reputation for making its own rules, New York includes some distinctive aspects within its lemon laws.
Read more
Blog

Defining The 'S' In ESG And Navigating Disclosures

For businesses interested in making robust ESG disclosures, not only can the sheer number of frameworks and standards make ESG performance reporting seem overwhelming, the frameworks themselves can be a bit fuzzy on how they define and measure the "S" of ESG.
Read more