OneTrust

We utilize OneTrust for 3rd party risk management and to dictate the frequency of review. Using a risk matrix new vendors brought into the platform are assigned a risk level based on data sensitivity and the inherent risk of the vendor. We then use OneTrust to automate information gathering and to schedule reassessments based on risk category.

I had evaluated many GRC but I like OneTrust mini GRC as it is user-friendly, easy to deploy and easy to integrate. The beauty of this software is that, we can implement one by one module (e.g. Vendor/Third-party risk management, Cookie Compliance, IT Risk management etc...). This is an excellent tool for Data privacy management.

We use it as managed by the Data Privacy Implementation Program (LGPD and GDPR). We needed a tool that was easy to use and that gave corporate users full control over processing personal data and reporting compliance with the law. OneTrust, being SaaS, provides fast availability, a smooth navigation experience for the end-user, and powerful tools such as Data Inventory Automation, Assessment Automation, Risk Control, and Privacy Rights (DSAR) Automation.

To achieve the culture of privacy as a priority, we implemented OneTrust as a technology platform that not only embeds this policy but also enables employees to efficiently carry out their responsibilities in roles-based and centralized databases. From a legal perspective, it helps us to be compliant and help mitigate the risks for the company in terms of data protection. The tool is accessible from every level and allows us to see everything in our privacy program at once

OneTrust is used by several departments, for data access, collection, analysis, and synthetic storage. Besides, OneTrust has reliable templates, which guide the nature of the procedures necessary for executing different processes. Again, OneTrust offers the standard website compliance screen, which verifies the details and the traffic from the internet. Further, OneTrust offers data mapping, which is an efficient procedure for modeling and offering articulate profiling. Finally, the customer's details are collected, reviewed, and scanned for the required needs.

Percona uses OneTrust to ensure GDPR compliance; it is primarily used by the security and compliance team for data mapping, data subject access requests, vendor risk management, and incident response modules, all of which are necessary to ensure compliance with the GDPR, other applicable privacy regulations, and information security frameworks (such as ISO 27001).

OneTrust is used by the marketing department to manage our requests for information access and information deletion under the guidelines of the California Consumer Privacy Act. We use the built-in templates and workflows to ensure we are addressing each step of the process in deleting or accessing a customer's information, as well as notifying them the process has been completed. We also use OneTrust to power the cookie consent pop-up for new visitors who come to our website.