PRIVACY IMPACT ASSESSMENT

The Data Privacy Act of 2012 (DPA) requires every organization processing personal information to conduct a Privacy Impact Assessment (PIA) to determine the appropriate level of security that the organization needs to implement. It is used to evaluate and manage risks or impacts on privacy of a particular program, project, process, measure, system or technology product. This is required to be conducted:

Prior to formulation of you Privacy Management Program
Prior to implementation of a system, process, program, project where collection, use, storage and disposal of data is involved
If there changes in the processing activities Before entering it to data sharing or outsourcing agreement
Large scale data collection
To existing system, process, program, project where collection, use, storage and disposal of data is involved but PIA has not yet been conducted.

By conducting a PIA, one will be able to identify, assess, evaluate and manage these risks, and facilitate your compliance with the Data Privacy Act (DPA).

Find out more

What we offer

Conducting a PIA is entails a lot of time and effort especially if you have several processing activities involved since PIA is required to be conducted on every system, process, program, project where collection, use, storage and disposal of data is involved. This service covers the following areas:

Threshold analysis – identifying the process, systems, projects, programs requiring the conduct of the
PIA Planning and determining the scope of the PIA
Stakeholder’s engagement
Identifying, assessing, evaluating risks and its controls
Risk management
Records of Data Processing Activities: collection, use, storage, disclosure and disposal
Data inventory and map of information flow
Organization security measures and mechanisms for data subject rights
PIA reports
Implementation of controls and review mechanisms

Advantages

Reduce and manage risks on your data processing activities
Prepare your Records of Processing Activities and PIA reports required by the National Privacy Commission
Minimize the risk of data breaches
Preserve and build your clients’ trust by managing your risks
Prevent unauthorized processing or mishandling of personal information and in turn avoid imprisonment and/or fines under the Data Privacy Act of 2012 (DPA)
Implement privacy by design and by default
Manage third party vendor risks
Demonstrate your compliance of the DPA
Implement a risk-based approach in processing personal information
Help you prepare your formulation of your Privacy Management Program Focus on your business goals while we focus on your regulatory data privacy compliance

PRIVACY IMPACT ASSESSMENT

What we offer

Advantages

This website uses cookies.