Gap Assessments

Data Privacy Gap Assessments

Like with any other organizational program, the first step in any Data Privacy program is to answer the following key questions:

  • What exactly do we need to do?
  • How do we go about doing it?

  • To answer these basic questions, an organizations needs to gain an understanding of:

  • To individuals in which geographies does the business have exposure to – directly or indirectly.
  • Therefore, which data privacy laws and regulations are applicable to the organization
  • Are there any specific standards or guidelines that the organization may need to further comply with

  • This understanding then needs to be distilled and integrated to arrive at:

  • What are the basic ‘common’ factors that need to be addressed? In other words, this establishes the Lowest Common Denominator (the ‘Privacy LCD’) for the organization
  • On top of this Privacy LCD, the special additional requirements for each geography need to be identified

  • The above understanding needs to be then mapped to the actual business operations, processes, technologies, people and entities on the ground. This mapping throws up the ‘gaps’ between the ‘As-Is State’ (the current state) and the ‘To-Be State (where the organization needs to get to).

    The above is what Arrka’s Data Privacy Gap Assessment exercise addresses.

    The Arrka Toolkit for Gap Assessment:

    We at Arrka have endeavoured to make life easier for our clients – via our Privacy Gap Assessment toolkit. The toolkit consists of the requisite intelligence supported by easy-to-use forms, templates, guidelines and other ‘how to’ documents that basically helps an organization carry out a Gap Assessment exercise.

    For example, our legal team has already analysed the key data privacy laws around the world and built a common framework that makes it easy for an organization to establish its own specific Privacy LCD. This gives the organization a head-start on its gap assessment exercise.

    To take another example, our privacy practitioners have not only put together easy-to-use templates and other documents, they have further customised them for specific industry verticals. And this is an ongoing exercise where we keep adding newer verticals. This makes it easier for organisations to hit the ground running for their gap assessment exercise, thus saving precious time, resources and funds.

    The toolkits are enabled on the Arrka Platform – so our clients have the option of working directly off this platform.