Privacy Audit · GDPR · CCPA · HIPAA
Privacy audit
with DPIA + ROPA built in
GDPR, CCPA / CPRA, HIPAA Privacy Rule, PIPEDA, LGPD. Data Protection Impact Assessment workflow, Records of Processing Activities, breach notification timer, data-subject request tracker — alongside the IIA-grade audit engagement model your privacy programme already needs.
DPIA + ROPA
- DPIA workflow scoped to processing activities
- ROPA inventory with data-flow mapping
- Lawful-basis register with retention SLA
- Cross-border transfer mechanism tracker (SCCs / IDTA)
Breach response
- 72-hour notification timer (GDPR Art. 33)
- Regulator + data-subject obligations matrix
- Incident-to-finding workflow
- Lessons-learned tracking across breaches
Data-subject rights
- DSR / SAR tracker with SLA timer
- Request type → workflow mapping
- Evidence retention for fulfilment
- Trend analytics across requesters
Cross-jurisdiction coverage
- GDPR (EU/UK), CCPA / CPRA (California)
- HIPAA Privacy Rule (US healthcare)
- PIPEDA (Canada), LGPD (Brazil)
- DORA ICT-related personal data overlap
Privacy programme that audits like an audit
DPIA + ROPA + DSR tracker on the same engagement model. 14-day trial.