An acquisition borne out of its users’ primary needs, OneTrust’s recent integration with data discovery giant Integris optimally positions the privacy program management software vendor against competitors in the market.
In part 1 of this set of posts, I discussed the trend within the marketplace for consolidation, acquisition, and partnerships between vendors. OneTrust and Integris were quickly followed up by TrustArc and BigID. I also discussed the potential concern for overlap or redundancy between the respective vendors’ feature lists, or a lack of integration, causing discord for current customers of the two brands.
During a recent briefing with members of OneTrust’s team, I inquired as to how the process of integration had transpired and what this joining of forces meant moving forward. The response echoed previous discussions I have had with the team, outlining the company’s desire to focus on filling the gaps in its current feature capabilities, as requested by its current customer base.
While OneTrust currently provides solutions across privacy management, consent and preference management, regulatory research, vendor risk, ethics and compliance, and governance, risk & compliance (GRC), the company saw an opportunity to further expand its data-focused ecosystem by adding data discovery and classification through OneTrust DataDiscovery. The use of AI and robotic automation to power data discovery across the organization lends itself to OneTrust moving toward a comprehensive approach to data governance. The DataDiscovery solution enhances the data subject access request (DSAR) process through the Targeted Data Discovery robotic automation for DSAR, a core feature that OneTrust’s customers were seeking in their privacy management software.
Source: OneTrust Vendor Briefing, OneTrust
One of the key findings of organizations seeking to enhance their data privacy program and strategy is that mapping the lifecycle of personal data or personally identifiable information (PII) is just one small piece of the ever-expanding puzzle. As such, it becomes apparent that data privacy and data security do not exist in isolation; they are components of an all-encompassing data governance framework. While mapping out the flow and lifecycle of personal data within the organization is an excellent start – and not a task to take lightly – it is just the beginning.
In acquiring Integris and adding the company’s expertise in data discovery and classification to its current gamut of privacy and compliance offerings, OneTrust helps to guide its customers in the direction of strategic data governance. This exemplifies taking a proactive as opposed to reactive approach to how the business and IT manage data, moving away from data privacy as a last-ditch effort and toward a more integrated approach to the data landscape.
The recent Schrems II invalidation of the EU-US Privacy Shield has added a layer of difficulty for organizations that operate across borders, as they now require additional contractual clauses and measures in place to ensure data can transfer freely. Privacy program management vendor Proteus-Cyber offers a streamlined solution with the release of its Transfer Impact Assessment tool.
TrustArc is partnering with BigID to add protection of sensitive data to its roster of data privacy and compliance capabilities. The move closely follows a partnership announced by two other major players in the data privacy and governance space, OneTrust and Integris.
Data intelligence software vendor Alation has made the move to emphasize data governance amongst its solution offerings to make the data catalog a dynamic platform for “a broad range of data intelligence solutions.”
The industry’s first self-service privacy software solution Ethyca receives its second round of investor funding, aptly timed with the release of Ethyca Pro. The privacy management solution provides full automation capabilities for data mapping, data subject requests (DSRs), and consent management for various international privacy regulations.
To further capabilities in the data privacy space, top-tier vendor OneTrust has acquired Integris, another leading vendor within the data discovery and classification sphere. This is a two-part note that focuses on the acquisition and anticipated synergies between the two companies.
AI-powered privacy is here to stay, driven by the innovative team at SECURITI.ai. The company injects automation through AI with its PrivacyOps solution, PRIVACI, taking the effort out of mapping out personal data within its various repositories.
The privacy management software space is rapidly becoming crowded with vendors all looking to add value. 2B Advice has released the most recent version (7.0) of its software, emphasizing the support tools needed to build a privacy-aware culture.
In response to criticism over data collection practices, Google is introducing default deletion of location history in its web and application activities for new accounts.
Proteus-Cyber, a leading vendor within the privacy program management space, has added two standout features to its current privacy software offering. The Threat Intelligence feature tracks and links directly to CVEs discovered daily and can be integrated within the IT asset register of current Proteus-Cyber NextGen Data Privacy users.