M1: Describe Microsoft’s Service Trust portal and privacy capabilities

Microsoft Service Trust Portal (STP)

The Microsoft Service Trust Portal provides a variety of content, tools, and other resources about how Microsoft cloud services protect data, and managing of cloud data security and compliance for your organization.

• It is Microsoft's public site for publishing audit reports and other compliance-related information associated with Microsoft’s cloud services

• To access log in as authenticated user with your Microsoft cloud services account (Microsoft Entra organization account)

Service Trust Portal Content Categories:

• Certifications, Regulations, and Standards

• Reports, Whitepapers, and Artifacts

• Industry and Regional Resources

• Resources for your Organization

It also has My library and Notification (will receive a mail when a doc in my library has updated)

What are Microsoft’s Privacy Principles ?

1. Control: access, modify, or delete

2. Transparency

3. Security: strong security and encryption, including two or more independent encryption layers to protect against compromises of any one layer

4. Strong legal protections

5. No content-based targeting

6. Benefits to you

Microsoft Priva

Microsoft Priva helps organizations meet their privacy requirements, safeguard personal data and build a privacy-resilient workspace.

Priva suite of solutions

1. Subject Rights Requests

2. Privacy Risk Management

3. Consent Management (preview)

4. Privacy Assessments (preview)

5. Tracker Scanning (preview)

Priva Privacy Risk Management

capability to set up policies that identify privacy risks in your Microsoft 365 environment and enable easy remediation.

1. Limit data overexposure.

2. Find and mitigate data transfers.

3. Minimize stored data.

Limit data overexposure of Priva Privacy Risk Management.

Data overexposure policies, which can be set up to cover both Microsoft 365 and multicloud (preview) locations, can help you detect and handle situations in which data that your organization has stored is insufficiently secure.

Resolution: making content items private, notifying content owners, or tagging items for further review.

Find and mitigate data transfers of Priva Privacy Risk Management.

Data transfer policies allow you to monitor for transfers between different world regions or between departments and outside of organization.

Resolution: making content items private, notifying content owners, or tagging items for further review.

Minimize stored data of Priva Privacy Risk Management.

Data minimization policies allow you to look for data that your organization has been storing for at least a certain length of time

Resolution: marking items for deletion, notifying content owners, or tagging items for further review.

Priva Subject Rights Requests

which can address subject rights request for data within your organization's Microsoft 365 environment or for subject rights request for data beyond Microsoft 365, currently in preview.

Priva Consent Management

Priva Consent Management is a regulatory-independent solution for streamlining the management of consented personal data which allows organizations to obtain, manage, and record user consent for the collection, processing, and sharing of personal data.

Priva Privacy Assessments

Priva Privacy Assessments automates the discovery, documentation, and evaluation of personal data use across your entire data estate. Using this regulatory-independent solution, you can automate privacy assessments and build a complete compliance record for the responsible use of personal data.

Priva Tracker Scanning

Priva Tracker Scanning empowers organizations to automate the identification of tracking technologies across multiple web properties, driving the efficient management of website privacy compliance. With Tracker Scanning you can automate scans for trackers, evaluate and manage web trackers, and streamline compliance reporting.

The new Priva portal (preview) has a unified experience that streamlines navigation for all Priva solutions and provides a single-entry point for settings, search, and roles and permissions management.