Privacy Compliance

Concerns around handling customer and employee data have rapidly risen up the agenda for every organisation. Global privacy laws such as GDPR and CCPA, plus standards such as HIPPA and ISO27552 fundamentally change how everyone needs to think about privacy.

Unless you clearly understand how you handle and process data throughout your organisation, you cannot be compliant, and you are at risk of fines and prosecution.

Every jurisdiction in the world has privacy legislation in place or in preparation, which makes achieving compliance an increasingly complex undertaking.

100

plus countries already have legislation in place to secure the privacy and protection of data

€245M

Total fines levied on some 390 organisations under GDPR

50%

of companies receive up to 100 privacy requests from their customers on a weekly basis.

The SaaS Dilemma and Privacy

The task of achieving compliance is made even more challenging due to the overwhelming shift to remotely-accessed Cloud applications (or SaaS).

With Cloud apps, you no longer have total control over the software you use and you place much greater trust in your software vendor to follow appropriate legislation. You give your data to the SaaS vendors and hope that they will look after it.

But under privacy legislation you still maintain responsibility for your customers’ data.

So, do you really know what your users are doing with SaaS and where your customer data is stored?

Do you really know about all the SaaS that is in use within your organisation?

At Ampliphae we find that the majority of organisations do not know about all the SaaS Cloud apps in use, and cannot fully track privacy data as it flows out of the organisation and into the Cloud.

We find that the predominately manual methods used to understand and manage compliance in support of GDPR are not extensible to the long tail of vendor-managed SaaS.

This is a ticking timebomb that exposes your organisation to potential privacy violations, meaning the benefit you accrue from SaaS may well be more than offset by the risk involved.

To mitigate this risk you must be able to discover the information you need to ensure you can demonstrate compliance with legislation from across the globe.