TrustArc Privacy Studio

Implementing TrustArc's Privacy Studio involves a structured process to ensure seamless integration and effective utilization:

1. Assessment and Planning: Evaluate your organization's privacy requirements and establish a tailored implementation strategy.

2. Configuration: Customize Privacy Studio settings to align with your organization's policies and compliance objectives.

3. Integration: Integrate Privacy Studio with existing systems and data sources to ensure comprehensive data governance.

4. Testing: Conduct thorough testing to validate system functionality and compliance workflows.

5. Training: Provide user training to ensure effective adoption and utilization of Privacy Studio features.

6. Deployment: Launch the platform within your organization, ensuring support mechanisms are in place for ongoing assistance.

TrustArc Privacy Studio is designed to be customizable to meet specific business needs. The platform offers various features that allow organizations to tailor their privacy management processes effectively:

1. Assessment Manager Customization: Organizations can customize fields, question types, and response methods within the Assessment Manager. This flexibility enables the creation of tailored assessments that align with unique business processes and compliance requirements.

2. Consent Manager Design Selection: The platform allows for the selection and customization of consent manager designs, such as CCPA Experience, GDPR Experience, or PIPEDA. Users can edit or update these designs to ensure consistency with their brand and compliance needs.

3. Custom Vendor and Tracker Management: Privacy Studio provides the capability to add and manage custom vendors and trackers, allowing businesses to maintain control over their data collection practices and ensure compliance with specific privacy policies.

4. Trust Center Customization: The Trust Center feature enables organizations to centralize policies, disclosures, and trust-building information in a customizable, no-code hub. This allows for the creation of a tailored space that aligns with the company's branding and provides users with easy access to important privacy information.

TrustArc offers training and support to new users of Privacy Studio, ensuring effective onboarding and ongoing assistance:

Training Resources:

1. TrustArc Academy: A dedicated platform providing a wealth of educational materials, including articles, eBooks, webinars, and videos, to help users deepen their understanding of data privacy and maximize the use of Privacy Studio.

2. Webinars and Videos: Regularly updated content designed to enhance users' data privacy knowledge and compliance practices, facilitating a better grasp of Privacy Studio's functionalities.

Support Services:

1. Help Center: An extensive resource offering detailed guides, FAQs, and troubleshooting assistance to address common user inquiries and challenges.

2. Customer Support Team: Accessible for personalized assistance, the support team is available to help with specific issues or questions, ensuring users can effectively navigate and utilize Privacy Studio.

TrustArc Privacy Studio implements a comprehensive set of security measures to protect user data, adhering to industry standards and best practices. Key security protocols include:

1. Data Encryption: All customer data is encrypted both in transit and at rest. Transport Layer Security (TLS) v1.2 is used for data in transit, and Advanced Encryption Standard (AES) 256-bit encryption is applied to data at rest.

2. Secure Hosting Environment: The platform is hosted by a world-class, enterprise-grade cloud data hosting provider equipped with comprehensive security safeguards, ensuring robust protection against unauthorized access.

3. Intrusion Detection and Monitoring: TrustArc maintains intrusion detection systems, comprehensive logging, and response plans to monitor and address potential security incidents promptly.

4. Regular Security Assessments: The company conducts annual assessments through qualified external third-party auditors, following the American Institute of Certified Public Accountants (AICPA) Service Organization Control (SOC) 2 Type II standards, to ensure the effectiveness of their security controls.

TrustArc Privacy Studio is designed to uphold data ownership rights and facilitate data portability in alignment with applicable data protection regulations.

Data Ownership:

• Customer Ownership: As outlined in TrustArc Subscription Services Agreement, customers retain exclusive ownership of their data and confidential information. TrustArc acknowledges that all rights, title, and interest in customer data remain solely with the customer.

Data Portability:

• Facilitating Data Portability: TrustArc recognizes the importance of data portability, enabling individuals to obtain and reuse their personal data across different services. This aligns with rights established under regulations like the General Data Protection Regulation (GDPR).

TrustArc Subscription Services Agreement outlines the terms and conditions for contract renewal and cancellation of their Privacy Studio services. Key points include:

Contract Renewal:

• Automatic Renewal: Unless specified otherwise in the Order, subscriptions automatically renew for one-year terms at TrustArc prevailing pricing and terms.

• Non-Renewal Notice: To prevent automatic renewal, either party must provide written notice of non-renewal at least 30 days before the current subscription term ends.

  trustarc.com

Contract Cancellation:

• Termination for Convenience: If there are no active Orders, either party can terminate the agreement with 90 days' prior written notice.

• Termination for Cause: Either party may terminate the agreement or any Order if the other party materially breaches the agreement and fails to cure the breach within 30 days after receiving written notice. Immediate termination is possible if the breach is incurable. Material breaches include non-compliance with specified restrictions.

• Effect of Termination: Upon termination:

  • All active Orders are terminated.

  • Customer and its users must cease access and use of the solutions, except for data retrieval purposes, within a 30-day post-termination period.

  • All outstanding payment obligations become immediately due.

  • TrustArc will make customer data available for retrieval for 30 days following termination.

TrustArc Privacy Studio is designed to assist organizations in achieving compliance with a variety of global privacy standards and regulations:

1. General Data Protection Regulation (GDPR): The platform offers features to help organizations manage data subject rights, consent, and data mapping, aligning with GDPR requirements.

2. California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA): Privacy Studio includes functionalities to facilitate compliance with CCPA/CPRA, such as handling consumer requests and managing data disclosures.

3. APEC Cross Border Privacy Rules (CBPR) and Privacy Recognition for Processors (PRP): TrustArc provides certification programs for APEC CBPR and PRP, assisting organizations in demonstrating compliance with these frameworks.

4. Data Privacy Framework (DPF): The platform supports compliance with the Data Privacy Framework, aiding in the management of transatlantic data transfers.

5. ISO/IEC 27001: TrustArc solutions align with the ISO/IEC 27001 standard for information security management systems, helping organizations implement robust security controls.