THIRD PARTY PRIVACY DUE DILIGENCE AND MANAGEMENT

Waltzer takes care of evaluating vendor privacy postures and risks, pre-contract due diligence and contract requirements, cloud service usage guidance and assessment and ongoing third-party management policies and programs.

All the elements that are important for your own organization to have privacy assurance should apply to third parties handling data on your behalf.

As part of our third party management service, we look at:

• What data belonging to you that the third party company will hold

• Whether the data is sensitive

• Where the data is located

• Whether the data is classified (public, confidential, highly confidential)

• Whether the data is encrypted at rest and/or in transit

• How and whether the data can be deleted, corrected or provided to a person (for example, one of your customers) on request