When do you need a Privacy Partner?
2. When do you need a Privacy Partner?
3. What does an Assenteo Privacy Partner do?
4. Privacy Partner in Action: Upheal
1. What is a Privacy Partner?
At Assenteo, we use the term Privacy Partner to describe the professional who can support all your data protection and compliance needs, beyond those needs which fall within the typical remit of a DPO.
Under GDPR, DPOs must maintain independence from your business and focus on protecting European user interests (and thereby ensuring your business’ GDPR compliance).
Privacy Partners do this essential work but also focus on your business’ commercial interests. They put your commercial interests into an optimal balance with data subject rights, ensuring compliance is matched by competitiveness.
While a DPO is primarily a risk management role, a Privacy Partner encompasses both risk management and business enablement. Assenteo's Privacy Partner can fulfil both functions. However, since a DPO must remain independent from the business, we have built strong safeguards to keep these two functions distinct. In practice, your Privacy Partner will know when to wear their "DPO hat" and when to wear their "Privacy Partner hat."
With a Privacy Partner onboard, privacy compliance is matched by privacy as strategy.
Risk management
Taking on the role of a DPO.
For example:
Acting as public point of contact for the European Commission in case of complaint.
Acting as a public point of contact for users to communicate with.
Advising on internal company compliance, e.g. handling employee data.
Advising on product compliance, e.g. handling user data.
Ensuring data compliance reaches across relevant jurisdictions (including CCPA and other US data protection regulations).
Business enablement
This is the part of the role which ensures compliance is matched by competitiveness.
Ensuring that compliance is ongoing and efficient (e.g. integrating privacy into product design, monitoring vendor agreements and handling any incidents)
Navigating grey areas in the regulation smartly.
Helping your company secure new business by signalling trust in sales processes.
Much more …
2. When do you need a Privacy Partner?
A Privacy Partner helps your business with ongoing privacy steering, product privacy integration, vendor governance and drafting privacy documents, a valuable service which moves beyond the contact-point role of the DPO. In this way, a Privacy Partner helps you build a product which signals trustworthiness to current users, prospective users and stakeholders. A Privacy Partner also takes on much of the compliance work, easing day-to-day management and freeing you up to focus on business growth.
A Privacy Partner is not a GDPR mandated role in the same way as that of a DPO or EU/ UK Representative. Therefore, your business does not legally need a Privacy Partner in the same way it might a DPO or an EU/ UK Representative. However, appointing a Privacy Partner can be a huge asset, facilitating a better balance of risk management and company enablement. This, in turn, improves business efficiency and scalability.
Further details of the services offered by an Assenteo Privacy Partner can be found here.
3. What does an Assenteo Privacy Partner do?
Ongoing Privacy Steering
Answer slack questions on HIPAA, FERPA, consent, tracking, etc.
Interpreting law changes and translating into action
Judgment calls on edge cases
Data incident handling and notification decisions
Product and Feature Privacy Integration
Working with product teams on new features before release
Running privacy assessments as part of product lifecycle
Identifying privacy risks early
Identifying privacy opportunities (trust signals, better design)
Vendor and Tool Governance
Vendor security assessments
Reviewing new tools
Data tracking/ cookie setup
Document and Policy Engine
DPIAs, ROPAs, DPAs
Privacy policy updates as product evolves
Internal policies
Playbooks for handling incoming DPAs
Incident, Regulator and Customer Handling
Data Incidents
Regulatory responses
SPA redlines
Customer privacy questionnaires
Protecting the company from over-committing
4. Privacy Partner in Action: Upheal
Upheal is an AI-powered automated clinical note-taking platform which serves US mental health providers. You can see the details of Assenteo’s work with Upheal for further insight into how a Privacy Partner has helped a real business with simultaneous risk management and company enablement.
Last updated