1.Identify And Label Personal Data

• Data Discovery: Locate personal data across structured, unstructured and semi-structured silos
• Data Classification: Use AI to automatically attach metadata (tags or labels) to files, folders, or databases containing sensitive information
• Data Mapping: Monitor data flows programmatically, and prioritize risks and mitigation activities

2.Control Personal Data

• Purpose-Based Access Control: Establish granular, content- and context- aware access controls over personal data
• Record Keeping: Maintain logs of who has accessed sensitive content, and what they did with it
• Lifecycle Management: Delete content that is redundant, obsolete or trivial (ROT) and enforce “end of life” policies
• PII Protection: Scramble, hash, encrypt, and over-write privileged PII
• Localization: Restrict file storage and/or access to defined geographies

3.Fulfill Compliance Obligations

• Incident Response: Swiftly assess whether an incident could trigger a breach disclosure and initiate a series of privacy-specific activities if required
• SAR/DSAR Fulfillment: Automate intake and response for subject access requests
• Consent Management: Provide transparency and choices over how personal data should be handled
• Privacy Impact Assessments (PIAs): Develop and track PIAs through predefined workflows