(1) Defining Scoping Considerations:

We’ll assess and validate the following critical scoping issues when conducting a privacy assessment against any number of state specific laws:

• What types of categories of data are deemed in scope for the specific law or regulation?
• How is personal data being collected, used, shared & disclosed, stored, protected, retained, and disposed of?

While each state law is technically unique in terms of data privacy requirements, they often share many similarities in terms of affording consumers far-reaching data privacy rights.

(2) Assessing Data Privacy Requirements & Gaps:

Every U.S. state law has a very specific set of data privacy requirements that must be implemented by organizations for ensuring compliance. The challenge is often in the interpretation of such laws in terms of what they actually mean and how to go about implementing the requirements. Our team of data privacy experts are fully trained and well-versed on all current – and pending – U.S. state privacy laws.

(3) Assessing Information Security Requirements & Gaps:

Information security is always a key requirement in almost every piece of data privacy law or regulation. Sometimes it’s spelled out quite clearly, other times it’s not. Centris’ data privacy experts have a strong technical understanding of all current U.S. state privacy laws, thus, bringing immense knowledge to the table in terms of information security.

(4) Assessing Documentation Requirements & Gaps:

From privacy policies to information security and cybersecurity policies dealing with data privacy incidents and breaches – and much more – comprehensive documentation is essential. With Centris, we’ll help you identify all of your documentation needs in terms of data privacy, and if necessary, even write your policies and procedures. We offer privacy assessments & programs, data governance, data mapping, PIA, DPIA, GDPR assessments, CCPA/CPRA assessments, international international privacy assessments, U.S. state privacy assessments, EU Cloud Code of Conduct, Microsoft SSPA/DPR, along with data privacy programs.

(5) Reporting & Remediation:

Almost any organization performing a privacy assessment against a current U.S. state privacy law will have found areas requiring remediation. With Centris, our years of data privacy expertise allow us to offer comprehensive remediation services and solutions to your organization. From helping establish tighter security controls to developing robust data privacy policies and procedures – and more – we offer a full menu of remediation services.