Risk and compliance resources

DPDx is a USA-focused privacy and data protection framework delivered through a specific PrivIQ partner, designed for organisations needing practical, evidenced privacy practices in the US market.

Privacy compliance software is a structured platform for managing privacy obligations across regulations - data inventories, ROPA, DSARs, breach response, processor oversight, consent and audit-grade evidence in one place.

A Data Protection Impact Assessment is a structured review of a processing activity that identifies privacy risks to individuals and decides how to mitigate them. GDPR requires one for high-risk processing - including most uses of AI on personal data.

A Transfer Impact Assessment evaluates whether personal data transferred outside the originating jurisdiction is afforded essentially equivalent protection. Required after Schrems II for most transfers from the EEA.

A Record of Processing Activities is the structured inventory of how an organisation processes personal data. Required by GDPR Article 30, it underpins almost every other privacy activity.

DSAR management is the structured workflow for receiving, validating, fulfilling and recording data subject requests - access, deletion, portability, correction, objection and similar rights.

Most privacy programmes start in spreadsheets. They rarely scale, and they almost never produce audit-grade evidence on demand. Here's how to know when it's time to move on.

Breach response is the structured handling of a privacy or security incident - discovery, evaluation, communication, recording and remediation. Tight regulator timeframes apply.

GPDP is PrivIQ's baseline privacy framework for organisations in jurisdictions without dedicated privacy regulation, or where a baseline personal data protection programme is required as a common floor across multiple jurisdictions.

USCP is PrivIQ's framework for organisations that need practical governance over consumer data handling, notices, rights, third-party risk and evidence of responsible practices in the USA's fragmented state-by-state landscape.