DATASHEET

Archer Privacy ProgramManagement®

Use Case for Regulatory & Corporate Compliance Management

The Challenge
For many years, organizations have wrestled with the daunting task of protecting data in theirbusiness operations. The European Union (EU) General Data Protection Regulation (GDPR)
and the California Consumer Protection Act (CCPA) highlight to organizations the importanceof protecting personal data and the consequences for failing to adequately do so. In addition,
whether it is the sco pe of financial account data for the Gramm-Leach-Bliley Act (GLBA), patient
healthcare data for the Health Insurance Portability and Accountability Act (HIPAA), or simply
battling the general risks that information thieves pose to everyone, data protection is critical inmanaging information risk.
Now more than ever, organizations are charged with protecting sensitive and private informationin many different ways. Organizations must demonstrate diligence in maintaining accurate
inventories of personal data, where it resides, and how and where it is transmitted and handled.
Increasing advocacy and awareness has resulted in more pressure on organizations to provide
customers with insight and the ability to request at any time how much of their personal data
is being kept and how it is being used. As a result, regulators are also ramping up their scrutiny
to ensure organizations can process information disclosure requests in a timely manner andhonor customers’ “right to be forgotten.”
Organizations in every market continue to face the ongoing risk of data breaches and thedevastating fallout that can result from those breaches. In many respects, compliance obligations
merely underscore an already pressing business need to proactively maintain vigilant operational
security processes and due care as critical elements of a sound risk management program. Whether
the target is a citizen’s private information or corporate intellectual property, the techniques andapproaches are often similar. In today’s world of high stakes information thievery and corporate
espionage, organizations must protect all types of sensitive data to survive.

Overview
Building upon the capabilities provided by the pre-requisite Archer Data Governance use case,Archer Privacy Program Management is designed to help organizations identify and assess theprivacy impacts and risks posed by data processing activities involving personally identifiable
information (PII).
Archer Privacy Program Management is designed to enable organizations to group processing
activities for the purposes of performing data protection impact assessments and tracking
regulatory and data breach communications with data protection authorities.

Chief privacy officers, data privacy officers (DPO), and privacy teams are also enabled to benefit from a central repositoryof information needed to demonstrate commitment to GDPR compliance around the organization’s privacy program.
Archer Privacy Program Management is designed to help organizations to improve how they manage personal dataprocessing activities, document communications with regulators, and assess the privacy risk impact of managing PII.
With better diligence and stronger programs in place, organizations are empowered to demonstrate conformance withcompliance obligations. Establishing an effective privacy management program can also positively impact the organization’sbottom line, through reduced risk exposure to fines and penalties for non-compliance.

Features• Track and archive communications with		 regulatory organizations regarding		 privacy questions.
• Maintain assessment scopes for personal		 and sensitive data environments.
• Perform privacy impact assessments		 (PIA) and data protection impact		 assessments (DPIA).
• Identify operating conditions that may		 necessitate a DPIA pursuant to Articles		 35 and 36 of GDPR.

Benefits
Archer Privacy Program Management isdesigned to help your privacy and/or legal teams:• Demonstrate accountability and		 commitment to GDPR compliance		 across your organization.
• Configure dashboards to effectively		 monitor your privacy program.
• Improve understanding, visibility and		 status tracking of personal and sensitive		 information with Data Identification		assessments.
• Execute consistent DPIAs and PIAs.

About Archer
Archer is a leading provider of integrated risk management (IRM) solutions that enable customers to improve strategic decision-making
and operational resilience with a modern technology platform that supports qualitative and quantitative analysis driven by both businessand IT impacts. As true pioneers in GRC software, Archer remains solely dedicated to helping customers manage risk and compliancedomains, from traditional operational risk to emerging issues such as ESG. With over 20 years in the risk management industry, theArcher customer base represents one of the largest pure risk management communities globally, with more than 1,200 customers
including more than 50% of the Fortune 500.
Visit www.ArcherIRM.com.

@ArcherIRM

Archer Integrated Risk Management©2023 Archer Technologies LLC. All rights reserved. Archer and the Archer logo are registered trademarks or trademarks of Archer
Technologies LLC in the United States and other countries. All other trademarks are the property of their respective owners. Archer
believes the information in this document is accurate. The information is subject to change without notice. 10/23 Data Sheet.