If you already have a notice and a way to handle access or deletion requests, it’s fair to ask: why invest in more? After all, if a regulator comes across your organization, you are complying with law as it relates to your public stance. This isn't the entire privacy picture, however. The first reason you might want to stand up a comprehensive privacy program is risk. Modern privacy laws and regulators don’t just ask, “Do you have a notice?” They ask whether your organization has reasonable a...

Program Building: Why its Worth Building an Actual Privacy Program