The role of privacy professionals and privacy technologists

There are many different types of roles within the privacy industry ranging from legal to more technical roles.

Data Protection Officers

Ensure the organization complies with data protection laws, developing privacy policies and serving as the main point of contact for regulatory authorities.

Privacy Engineers

Designs and implements privacy-enhancing technologies within technology systems to address risks and ensure compliance with privacy regulations.

Privacy Technologist

Advisory role that implements privacy measures within technology systems. Manages access controls.

Privacy Analyst

Evaluates privacy risks, monitors compliance with privacy regulations (responding to rights requests), and assists in the development and implementation of privacy policies.

Privacy Program Manager or Privacy Manager

Develops and manages aspects of the privacy program, implements processes and automation.

What parts of the technology system are privacy technologists in charge of to make sure they are in line with privacy regulations?

Security, Computers, Networks, Applications, Websites, Databases

Information Security Manager

Oversees the organization’s information security strategy and manages security teams

Compliance Officer

Ensures the organization adheres to legal and regulatory requirements, conducts compliance audits and develops training programs across the business.

Privacy Notice

A statement published by an organization’s privacy/legal team that informs consumers and business partners about the organization’s information privacy practices.

When should a privacy notice be deployed?

This changes depending on the legislation so it is for the organization to decide. However, if you are processing data, the notice should be provided before you begin doing so.

Most common parts of a privacy notice?

Who are we,

What data are we collecting,

How will the data be used,

Who are we sharing it with?

How can we deliver the privacy notice to the user?

Requiring users to check a box agreeing to the notice before entering the site or purchasing a product, or having a link to the privacy notice on the website.

Privacy Policy

Internal statements designed to communicate best privacy practices and information-handling guidelines for those within an organization. 

Who takes responsibility of a project after a privacy technologist gives advice?

Implementation of any advice rests with the Risk (Business) Owner, Project Manager, or the Data Controller. The privacy technologist only advises on risks.

Why is it a benefit for the privacy technologist to establish a common language for privacy controls?

A common language for privacy controls allows businesses, regulators, and consumers to speak the same language when discussing personal data. Its good for consistency, clarity and enhanced trust.

How does a privacy technologist evaluate the effectiveness of a privacy policy?

Establishe key objectives and internal controls to evaluate the health of the overall program. Internal controls are objectives.