Privacy Information Management is complex but we’ve simplified it

Whether you call it personal or privacy information management the subject is growing quickly as a topic of business importance. Threats from massive fines and reputational issues are driving customers to mandate their suppliers show compliance with regulations like GDPR and its counterparts across the world.

Compliance with privacy requirements is complex and on top of broader information security management (i.e. for other information assets like commercial contracts, IPR and financial data) can be a real challenge. We can help you with various levels of privacy compliance and will also help you work out what level of privacy information management system (PIMS) you might need and why.

Privacy is a complex topic even when it comes to naming conventions

Whether your organisation is a controller or a processor, or both, it needs to protect the personal data of individuals. Personal data is any information that relates to an identified or identifiable individual. It can cover anything from a name and address, to a record of purchases made, to confidential medical records.

Personal data protection regulations and methods are developing fast. And there are different ways of describing the data you’re protecting. For example:

• The UK Information Commissioner’s Office (ICO) calls it “personal data”
• The British Standards Institute (BSI) calls it “personal information”
• The International Standards Organisation (ISO) calls it “privacy information”

To keep things simple, we usually call it personal data.

Third parties also differ in their naming convention for management systems around it too, for example:

• The ICO doesn’t have a specific name for it
• The BSI calls it a Personal Information Management System
• The ISO calls it a Privacy Information Management System

At least both of those specific terms shorten to PIMS, so that’s what we call it!

There are many benefits associated with a PIMS and it should be something that helps grow value for the organisation as well as help manage threats. Benefits include:

1. Builds trust in your company’s perceived ability to manage personal information, both for customers and employees
2. Provides increased assurance for stakeholders
3. Supports compliance with the GDPR and other privacy regulations
4. Improves structure and focus of data privacy management
5. Embeds personal data management into the organization’s culture
6. Takes a risk-based approach to data privacy management
7. Encourages continual improvement to adapt to changes inside and outside the organisation
8. More forward thinking versus competitors so helpful for winning new business with risk averse and powerful customers

A suite of unique privacy management tools

We’ve preconfigured various PIMS solutions to meet your needs with the aim of simplification and ease of completion at their heart. As with all the ISMS.online features they are fit for use whether you are a newcomer, improver or an expert and the PIMS takes advantage of our tried and tested ISMS functionality.

In addition you can also:

Record all your data processing activities

We make data mapping a simple task. It’s easy to record and review it all, adding your organisation’s details to our pre-configured dynamic Records of Processing Activity tool.

A secure space for Subject Access Requests

You’ll need to show how well you manage Subject Access Requests. Our secure SAR space keeps it all in one place, supporting it with automated reporting and insight.

Powerful risk assessment and management tools

We’ve created a built-in risk bank and a range of other practical tools that’ll help with every part of the risk assessment and management process.

Simple privacy assessment templates

It’s easy to set up and run different kinds of privacy assessment, from data protection impact assessments to regulatory or compliance readiness ones.

Effective, responsive breach management

You’ll be ready when the worst happens. We make it easy to plan and communicate your breach workflow, and document and learn from each and every incident.

Plus a range of other specially-created tools

Our tried-and-tested people and progress management tools

Highly efficient project oversight and collaboration

Our workspace makes collaboration easy and simplifies progress monitoring, with a simple approval process and automated reviews built in as standard.

Optional supply chain management tools

We can help you show that you’re in control of your supply chain, covering everything from contracts and contacts to relationship and performance management and monitoring.

Help and support engaging your people

Your staff need to be right at the heart of your GDPR solution. Our optional comms and engagement tools can help you bring them on board and keep them compliant.