Leveraging Independent Accountability to Enhance Privacy Tech in Your Compliance Strategy

Jun 24, 2021 by Bryant Fry, Deputy Director, Privacy Initiatives - Operations

No matter the size of your business, making data privacy a priority is a key component of maintaining the trust of your customers, investors, and the public at large. Today’s economy increasingly requires using systems that process data from around the world, even if you do not yet sell or operate outside the country where you are headquartered. 

To assist businesses in complying with the proliferation of differing privacy laws both in the United States and globally, privacy technology platforms have grown exponentially. Everything such as assessment managers, data mapping solutions, data subject request solutions, consent managers, deidentification/pseudonymity solutions, incident response solutions, privacy information managers, and website scanning services have all become common tools. 

These tools are critical, however deploying the right privacy tech solutions can only get you part of the way in achieving a successful compliance strategy. Once you select the right tech solution, the next step is to demonstrate to your stakeholders your business’ accountability – and commitment -- to its privacy policies and practices. 

Many forward-thinking business leaders turn to accountability markers like third-party privacy certification that can verify that your practices are, in fact, in accordance with recognized standards, while at the same time helping your privacy strategy remain interoperable with a variety of legal regimes. 

These privacy certifications, such as those offered by BBB National Programs, not only help make global privacy best practices achievable by businesses of any size, but they can be a great value, as the costs of pursuing certifications and other accountable privacy practices pale in comparison to the potential costs of regulatory action, the odds for which increase when businesses don’t pay attention to privacy.

Similarly, independent dispute resolution for customers with privacy complaints provides a second layer of trust, providing consumers with a responsive redress mechanism that sets your customer service apart. This type of mechanism is also mandated by international frameworks like APEC and Privacy Shield and is suggested by emerging legislation in Virginia and Colorado.

And don’t forget about the impact your vendors or partners can have on your business reputation for privacy. Third party certifications work here as well. Instead of dedicating internal resources to vet your contractors, ask your potential vendors to secure trustworthy third-party privacy certifications. Here are a few tips:

  • Look for services and mechanisms like our APEC Privacy Certification Programs and our Vendor Privacy Program
  • Use standardized contractual requirements to hold your business partners to the same standards and trusted best practices you expect of yourself.
  • Consider using independent dispute resolution procedures as part of those requirements. 

 

Once you know who touches your data and where that data is stored, it is up to you to conduct ongoing due diligence to make sure your partners treat it consistent with your standards, practices, and public statements.

Privacy technology platforms can provide helpful utility to document your privacy practices and to automate compliance. In an environment where global privacy regulations are actively shifting, in addition to relying on technology, maintaining a robust privacy program that demonstrates best practices such as accountability and transparency will go a long way toward minimizing the scrutiny of consumers and government agencies.

Our role at BBB National Programs as an independent provider of privacy certifications, assessments, and dispute resolution is to help companies confidently demonstrate that their privacy practices are built upon the principles that form the building blocks for global privacy standards.

We can help make privacy achievable and accountable for businesses of all sizes. Reach out to GlobalPrivacy@bbbnp.org to get started.

Suggested Articles

Blog

Are used cars covered under lemon laws?

Do your homework to make sure the used car you plan to buy is not a lemon, and if it is, does the lemon law cover it? The answer may depend on where you purchased the vehicle or where you live.
Read more
Blog

Case Study: Getting to Compliance with CARU and COPPA

In a recent case, CARU worked with TickTalk to help them achieve compliance with CARU’s Privacy Guidelines and the Children’s Online Privacy Protection Act (COPPA). CARU sat down with TickTalk once the case had closed to discuss their experience as well as some of the privacy challenges many companies face in the children’s space.
Read more
Blog

What to Know About the Georgia Lemon Law

BBB AUTO LINE provides an overview of each state’s lemon laws. In our ongoing blog series, we offer further insights on the laws for select states, and how BBB AUTO LINE can support consumers with lemon law disputes. Florida, California, and Texas have been covered. This post reviews the nuances of the lemon law in the Peachtree State – Georgia.
Read more
Blog

The TAPP Roadmap: Helping U.S. Companies Responsibly Collect and Manage Teenager Data

The TeenAge Privacy Program (TAPP) Roadmap was designed to assist any business that wishes to engage proactively with teen consumers, providing an operational framework to map the broad spectrum of potential harms impacting teens onto a concrete set of operational considerations.
Read more