{"id":49245,"date":"2022-11-10T17:00:00","date_gmt":"2022-11-10T17:00:00","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/security\/blog\/?p=124567"},"modified":"2022-11-10T17:00:00","modified_gmt":"2022-11-10T17:00:00","slug":"simplify-privacy-protection-with-microsoft-priva-subject-rights-requests","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/simplify-privacy-protection-with-microsoft-priva-subject-rights-requests\/","title":{"rendered":"Simplify privacy protection with Microsoft Priva Subject Rights Requests"},"content":{"rendered":"

The General Data Protection Regulation (GDPR) came into effect in 2018 and set a new standard for the level of control individuals in the European Union had on the personal data they shared online. Since then, the number of privacy regulations around the world has flourished and impacted the privacy landscape we see today. According to Gartner\u00ae, by the end of 2024, three-quarters of the world\u2019s population will have its personal data covered by modern privacy regulations.1<\/sup> Today, additional regulations like the California Consumer Privacy Act (CCPA) and Brazil\u2019s Lei Geral de Prote\u00e7\u00e3o de Dados (LGPD) empower people to exercise their right to request the personal data that organizations have collected from them.<\/p>\n

When organizations respond to subject rights requests, they are both meeting their regulatory requirements and providing people with control over their personal data. Although responding to requests can be quite complex, Microsoft Priva Subject Rights Requests<\/a> can help ease the process\u2014and with the preview arrival of Right to be Forgotten<\/a><\/strong>, Priva Subject Rights Requests can further support how organizations respect the privacy of their customers and employees.<\/p>\n

Understanding how people think about privacy<\/h2>\n

As many businesses around the world adapt their privacy practices, having both the tools that help address privacy requirements and a good understanding of how consumers perceive and feel about privacy are key to enabling trust with customers. Microsoft Priva<\/a>, the brand category for Microsoft Security, was announced at Microsoft Ignite in 2021 by Vasu Jakkal, Corporate Vice President of Microsoft Security, Compliance, and Identity.2<\/sup> Priva solidified our commitment to supporting organizations in their privacy journey with products that help safeguard personal data<\/a> and manage subject rights requests at scale. For organizations, having processes that help manage their privacy is critical, but it is also valuable to have a deep understanding of how people really think about privacy to guide their practices. We recently commissioned privacy research<\/a> that explores the emotional textures of privacy and what triggers privacy vulnerability. We learned that when businesses empathize with the privacy concerns people have and transparently address them, they foster trust and differentiate themselves from competitors.<\/p>\n

It\u2019s important for organizations to assess the varying causes that spark privacy vulnerability for both their consumers and their business. For example, a consumer may feel anxious or helpless because they don\u2019t know how their personal data is being used. However, if they are provided with transparency of how their data is being used and given clear options that enable the control of their data, their insecurities could be eased and trust in the process earned. For a business, privacy vulnerability could present itself through limited transparency or basic compliance\u2014leaving room for privacy risk to potentially unfold. For instance, a business that might fulfill a data subject request unconvincingly, or with basic effort, could be managing its privacy at a vulnerable level. If that business were to practice a \u201cbeyond-compliance,\u201d human-centered privacy approach, they could yield practices that help them build privacy resilience\u2014helping them stand apart from their competitors while they earn trust from their customers.<\/p>\n

\"Gradient<\/figure>\n

Figure 1. The differing perspectives of consumers and businesses regarding privacy vulnerability versus privacy resilience.<\/em><\/p>\n

The above figure demonstrates a privacy scale ranging from vulnerable to resilient and includes both consumer and business perspectives. On the consumer side, it ranges from feeling anxious, helpless, and lacking knowledge or motivation in protective coverage to secure, being in control, trusting the process, and being skilled in protective coverage. On the business side, it ranges from basic compliance, limited transparency, minimal control, and reactive approaches to beyond compliance, authentic privacy care, reciprocating data for value, and a proactive approach to consumer protection.<\/p>\n

Microsoft Priva Subject Rights Requests can help<\/h2>\n

Many times, even though an organization may be focused on a proactive privacy approach, managing and responding to subject rights requests can be a tedious and cumbersome process. It can be extremely time-consuming and taxing as they are also time-bound, bringing extra complexity to the organization. Responding to these requests often requires a tremendous amount of collaboration and manual review, and producing just a single request can be quite expensive. Nonetheless, completing these requests is not just an obligatory requirement, but also a tangible way that expresses respect for customer and employee privacy.<\/p>\n

Priva helps organizations more efficiently manage requests at scale\u2014Priva Subject Rights Requests automates the search and collection of content relevant to the data subject and facilitates tasks such as in-line review, redaction, and collaboration, all from an easy-to-use dashboard. Admins can easily get started by leveraging request templates that help them create requests with recommended default configurations and use Microsoft Power Automate integration, as well as API support to better fit into their existing processes.<\/p>\n

\"Priva<\/figure>\n

Figure 2. Priva Subject Rights Requests overview dashboard showing insights.<\/em><\/p>\n

Priva Subject Rights Requests help admins meet the strict deadlines associated with regulations like GDPR and ease the administrative burden of tedious tasks related to collection, review, and redaction. Completing a request also often requires teamwork from various departments within the organization. Priva provides secure collaboration through Microsoft Teams and keeps a history tab, highlighting actions taken from all collaborators for easy auditing\u2014streamlining the complexity of requests from beginning to post-completion.<\/p>\n

Microsoft Priva Subject Rights Requests highlights:<\/p>\n