Privacy Consent Order Response Services
Qualified, Independent Assessor of Privacy ComplianceProtiviti provides consent order services addressing a full array of privacy and other regulatory actions. Combining
proven experience handling consent orders with deep regulatory and technical resources, we are uniquelyequipped to scale even the most demanding enforcement actions with speed and the highest proficiency. Protiviti
deploys the correct mix of technology, data, risk, security, privacy and audit professionals to capture an accurate
and complete picture of compliance for some of the world’s largest and most complex organizations.

Protiviti’s Unique Capabilities for Privacy Compliance

123

Proven Regulatory Experience

Deep Privacy Knowledge

Cross-Domain ExpertiseProtiviti serves as the independent
assessor for a rapidly growing
portfolio of large, complex
regulatory compliance and consent
order evaluations.

Protiviti brings focused andexperienced regulatory,
operational and technical skills
required for in-depth privacy
compliance.

With a long history and practice inrisk and compliance, technology
consulting and audit, Protiviti
brings a full range of domain
expertise to bear.

We provide support toorganizations, from highlyregulated environments to themost expansive and complex
commercial organizations.

We are a dedicated team ofexperienced consultants who aresubject matter specialists inprivacy, information security andall aspects of data protection.

Protiviti deploys a complete
spectrum of needed experienceand perspectives to cover all
aspects of modern and emerging
privacy compliance.

Independent Assessor

Data GovernanceRisk Management

Enforcement Actions

Data Discovery and Analytics

Regulatory Compliance

Consent Orders

Data Protection

Technology Operations

Complex Regulatory Matters

Privacy Operations

Internal Audit

INNOVATE. TRANSFORM. SUCCEED.

Privacy Consent Order Response Services
Case Study: Comprehensive Evaluation
Protiviti was tasked with assessing the privacy compliance of a global technology firm with world-wide operations and both unparalleledtransaction volumes and data assets. Assessing regulatory compliance would require not only incredibly deep technology and privacy
skillsets, but the ability to scale assessment activities to cover a massive scope of operations under extraordinarily tight time constraints.
Protiviti assembled a team of the right privacy, technology and audit professionals to capture an accurate and complete picture ofcompliance with the consent order. Regular status checkpoints and debriefs were held with key client stakeholders, the Board of Directors
and the FTC. Protiviti’s approach addressed both strategic and tactical privacy requirements focusing on the following program andecosystem areas:

Privacy Program and Ecosystem Coverage
Privacy by Design

Privacy Program and Governance• Examine use and protection of personal
information (PI) in new and updatedproducts• Evaluate the completeness andcomprehensiveness of overall privacy
program components• Compare to industry analogs including
AICPA’s Generally Accepted PrivacyPrinciples and the NIST Privacy Framework• Evaluate design and process impacts on
PI from product ideation toimplementation• Validate privacy by design in practiceData Lifecycle Management
Transparency, Notice and Consent• Assess sufficiency and completeness of user
notices across broad ecosystem, affiliates
and partners• Inspect consent capture and management• Evaluate data processing activities acrossmyriad points in PI lifecycle:− Collection− Use− Sharing− Retention

Third Party Risk Management

Privacy Risk Assessment• Unpack and evaluate intensely complex
web of third-party data sharingrelationships and exchanges• Assess broader privacy program andprocesses for risks to user privacy• Generate detailed gap analysis• Examine processes and controls to ensure
proper handling of PI against demanding
and detailed regulatory prescriptions forthird-party interactions• Evaluate existing and planned controls
for effectiveness in addressing privacy
risks

Schedule a Technology Assessment today by contacting us at TechnologyConsulting@Protiviti.com.
Protiviti.com/TechnologyConsulting

TechnologyConsulting@Protiviti.com

TCblog.Protiviti.com

Protiviti (www.protiviti.com) is a global consulting firm that delivers deep expertise, objective insights, a tailored approach and unparalleled collaboration to helpleaders confidently face the future. Protiviti and our independent and locally owned Member Firms provide consulting solutions in finance, technology,operations, data, analytics, governance, risk and internal audit to our clients through our network of more than 85 locations in over 25 countries.
Named to the 2023 Fortune 100 Best Companies to Work For® list, Protiviti has served 80 percent of the Fortune 1000® and Fortune Global 500® companies.
We also work with smaller, growing companies, including those looking to go public, as well as with government agencies. Protiviti is a wholly owned subsidiaryof Robert Half (NYSE: RHI). Founded in 1948, Robert Half is a member of the S&P 500 index.
All referenced of trademarks are the property of their respective owners.
© 2023 Protiviti Inc. An Equal Opportunity Employer M/F/Disability/Veterans.
Protiviti is not licensed or registered as a public accounting firm and does not issue opinions on
financial statements or offer attestation services.