DPOinBOX

DPOinBOX from Straits Interactive enables users to create a privacy management program in a few simple steps, with a smart inbox that guides users with data-protection-as-a-service (DPaaS), so users can be operationally compliant and demonstrate accountability in a matter of weeks.

Governing privacy activities across the organization can be overwhelming. DPOinBOX helps users to stay in control with intelligent privacy operation tools. Data protection breaches can happen anywhere across the organization. The platform delivers the capability of identifying various sources of risks as the first step towards compliance of data protection and privacy laws.

• Compliance Assessment - Determine how far away an organisation is from fulfilling local regulations and best practices, including GRPR requirements.
• Compliance Dashboard - A highly visual dashboard with coloured indicators shows where to focus.
• Recommended Action - Let DPOinBOX analyse entries and make recommendations on how you can address specific compliance gaps.

• Inventory Update - Facilitate and view collaborative input of personal data collected, used, stored and disposed by each department.
• Inventory Analysis - Analyze an organization’s Personal Data Inventory and highlights areas that are relevant to the regulations.
• Recommended Actions - Let DPOinBOX analyse entries in the context of local data protection laws and make recommendations on how you can specifically comply with the requirements.

Assess Process Risks

• Data Mapping Update - Map all processes and resources to determine how personal data flows across the organization with the aid of a visual map.
• Data Mapping Analysis - Analyze Data Mapping repositories and highlights any issues in the processes and entities/departments that collect, use, disclose or store personal data in the organisation.

Assess New Projects

• Data Protection Impact Assessments - Conduct prescreening for all projects and initiatives to determine whether a Data Protection Impact Assessment (DPIA) / Privacy Impact Assessment (PIA) is needed.

DPOinBOX helps to manage a data protection and privacy program throughout the year. The system continually monitors the risks identified and helps organizations to put together action plans to treat those with major business impact. It guides the effort and demonstrates high level of accountability by staff towards privacy protection.

With a data protection programme in place, it is important that initiatives are sustained on a continuous basis. Using built-in tools, DPOinBOX helps train staff, perform on-site audit, etc.

Some features include:

• Compliance Status Reports - View the compliance status against regulations of entities/departments side-by-side. Collect-Use-Disclose-Store (CUDS).
• Operations Dashboard - Look at the Action Plans and statuses across the organisation through the lenses of various frameworks such as Collect-Use-Disclose-Store (CUDS).
• Inventory Report - View the Data Inventory information for all entities/departments side-by-side.
• Compliance Tracking - Distribute policies such as a Data Privacy Policy and Information Security policy to relevant individuals by email/mobile device, and record their acceptance and date/time of acceptance of the policies.
• Training and Communications Monitoring - Keep track of all communication and training related to Data Privacy.
• E-Learning - Administer an e-learning module to help selected employees understand key Data Privacy principles and practices.
• Competency Test - Create, publish, assign and track tests to gauge the competency of staff in Data Privacy principles and practices.
• Onsite Audits - Conduct a baseline audit to ensure that lapses and potential lapses are identified, documented, and addressed both one-time and on a regular basis, with 'before' and 'after' image / document capture.