Privacy Management

Exploring the ROI of your privacy program

Learn how investing in a privacy program can have a major impact on your organization's ROI.

Bex Evans

September 20, 2023 11 min

GRC & Security Assurance

Collect once, comply many: Scale your resources and optimize compliance

Create efficiencies and increase visibility by scoping, monitoring, and communicating your compliance posture.

Riyaz Habibbhai

September 18, 2023 5 min

AI Governance

Embracing responsible AI: Presenting OneTrust AI Governance

Explore how OneTrust AI Governance addresses the growing challenges of AI governance, ensuring visibility, lifecycle management, and risk mitigation in an ever-evolving landscape.

Riyaz Habibbhai

September 18, 2023 3 min

GRC & Security Assurance

Making enterprise risk manageable for the CISO

Created internally or externally, organizations are handling tons of data — all of which can impact your risk posture. Learn more about empowering the business with enterprise risk management.

Riyaz Habibbhai

September 18, 2023 3 min

Data Discovery & Classification

How to better govern your unstructured data

Learn how data governance can help protect your customers' sensitive data as well as meet the legal and security challenges posed by unstructured data.

Jason Koestenblatt

September 13, 2023 5 min

Data Discovery & Security

What is data governance?

Learn how to build an effective data governance program and the tools you need to unlock the value of your data.

Jason Koestenblatt

September 06, 2023 5 min

Consent & Preferences

OneTrust integrates with Salesforce to enable trusted data use

Marketers are data-driven and need to capture and process data through different systems, including Salesforce Marketing Cloud and Sales Cloud.

Ashlea Cartee

September 06, 2023 3 min

Consent & Preferences

OneTrust and Snowflake: Manage consent and enable effective data governance

Enabling data teams to better understand where sensitive data lives in the Data Cloud, use data responsibly, and ensure proper consent is granted for personal data access and use

Param Gopalasamy

August 31, 2023 5 min

Speak-Up Program Management

What you need to know about… whistleblowers (and UFOs)

Learn what it means to be a whistleblower and about the global regulations designed to protect them.

Param Gopalasamy

August 22, 2023 7 min

Consent & Preferences

Navigating TCF 2.2 and Google’s consent management platform requirements

Learn how TCF 2.2 affects Google's consent management platform's (CMP) requirements and what you need to know to achieve compliance.

August 11, 2023 6 min

Privacy Management

India passes Digital Personal Data Protection Bill

On August 9, 2023, the Digital Personal Data Protection Bill was passed through the Upper House of Parliament in India. Here’s what you need to know about the Bill.

Robb Hiscock

August 11, 2023 6 min

Internal Audit Management

What is NIST CSF? Everything you need to know

Learn about the NIST CSF and explore how this cybersecurity framework may benefit your organization.

Katrina Dalao

August 10, 2023 7 min

Internal Audit Management

What’s the difference between NIST 800-53 vs. NIST 800-171?

Understand which cybersecurity framework applies to your organization

Katrina Dalao

August 08, 2023 9 min

ESG Program Management

What is the EU Digital Rights and Principles Directive?

Learn the key points of the EU Digital Rights and Principles Directive and what best practices to consider when achieving compliance.

Param Gopalasamy

August 04, 2023 5 min

Internal Audit Management

PCI DSS 4.0: Your questions answered

Prepare your organization for PCI DSS 4.0 with these resources from audit and security professionals.

August 02, 2023 8 min

ESG Program Management

What is the EU Due Diligence Act?

Learn how this directive aims to make EU corporations accountable for their environmental and social impact

Param Gopalasamy

August 02, 2023 5 min

Privacy Management

A guide to Privacy by Design

The concept of Privacy by Design should be familiar to most privacy professionals but understanding how to implement it can be a different story. 

Robb Hiscock

August 02, 2023 6 min

Trust Transformation

Does your organization need a Trust Office?

Instead of ‘business as usual,’ organizations should focus on building trustworthy products through processes and people

Andrew Clearwater

July 25, 2023 6 min

Trust Transformation

TrustWeek 2023: Agenda now live

The ultimate conference for privacy, security, marketing, ethics, and ESG professionals comes to life with sessions on AI, IT risk, third party management, and more

July 19, 2023 5 min

AI Governance

Approaching the OECD Framework for the Classification of AI Systems

Artificial Intelligence has the power to unlock benefits for businesses and society. However, it also poses significant risks that can be managed through frameworks such as the OECD’s.

Bex Evans

July 13, 2023 9 min

Consent & Preferences

The ultimate guide to first-party data

Learn the best way to connect with your customers by building a first-party data marketing strategy.

Param Gopalasamy

July 13, 2023 18 min

Privacy Management

Delaware becomes twelfth state to pass comprehensive privacy act

The Delaware Personal Data Protection Act is set to become the twelfth privacy act in the US introducing a range of obligations on businesses that operate in the state. 

Robb Hiscock

July 12, 2023 6 min

Privacy & Data Governance

EU-US Data Privacy Framework: A brief history

The EU-US DPF is the latest chapter in a story that has been ongoing for over two decades, but how did we get here?

Robb Hiscock

July 12, 2023 5 min

Third-Party Risk

How to start a third-party risk management program: Implement effective processes across your organization

Learn how to implement an effective third-party risk management program that meets your organization's needs.

Katrina Dalao

July 11, 2023 5 min

Third-Party Risk

How to start a third-party risk management program: Monitor and maintain performance

How to start a third-party risk management program: Monitor and maintain performance

Katrina Dalao

July 11, 2023 5 min

Third-Party Risk

How to start a third-party risk management program: Get leadership buy-in

Create a TPRM program that addresses your organization’s highest security risks and aligns with strategic objectives

Katrina Dalao

July 11, 2023 5 min

Internal Audit Management

What's new in PCI DSS v4.0: How to prepare your organization

Keep your account data safe with the latest payment security standard

Katrina Dalao

July 10, 2023 7 min

Privacy Management

European Commission adopts adequacy decision for EU-US Data Privacy Framework

On July 10, 2023, the European Commission adopted its adequacy decision on the EU-US Data Privacy Framework restoring an important data transfer mechanism between the EU and US.

Robb Hiscock

July 10, 2023 7 min

Privacy Management

US privacy law: When to conduct a Privacy Impact Assessment and what to include

Privacy Impact Assessments are commonplace among most modern privacy laws but understanding your requirements in a patchwork of US state privacy can be challenging.

Robb Hiscock

July 05, 2023 9 min

Consent & Preferences

What you need to know about... Data protection in a Black Mirror world

Unraveling Black Mirror's privacy snafus: When science fiction meets reality, but forgets to do its privacy law homework

Param Gopalasamy

June 30, 2023 15 min

Third-Party Risk

How to start a third-party risk management program: Understand the types of third-party risks

Learn about the different types of third-party risks and how to address each one

Katrina Dalao

June 29, 2023 6 min

Privacy Management

Oregon passes comprehensive privacy bill. Awaits Governor’s signature

Oregon becomes the 11th state to pass comprehensive privacy law that becomes effective on July 1, 2024

Robb Hiscock

June 28, 2023 6 min

Privacy Management

Quebec’s Law 25: What is it and what do you need to know?

Privacy in Quebec has undergone a significant overhaul under Law 25 (previously known as Bill 64). The province will see several new requirements becoming effective in September 2023. 

Robb Hiscock

June 27, 2023 6 min

Third-Party Due Diligence

The global regulations driving third-party due diligence

We cover the key regulations to know for managing third-party risk

Kelly Maxwell

June 21, 2023 6 min

Privacy Management

Preparing for new privacy legislation in Canada – Part three

Bill C-27 will introduce the Artificial Intelligence and Data Act to help regulate the responsible use and development of AI in Canada. 

Neil Saddington

June 20, 2023 5 min

Data Discovery & Classification

Shifting left: Classifying and managing data sprawl at collection

Learn how to effectively discover and classify data by staring near the point of data collection to avoid data sprawl and inaccuracies.

June 15, 2023 2 min

What is a PCI DSS self-assessment questionnaire?

Self-assessment questionnaires help evaluate and prove PCI DSS compliance. Find out which SAQ is right for your organization

Katrina Dalao

June 15, 2023 5 min

Internal Audit Management

What is PCI DSS?

Learn the basics about PCI DSS, how it applies to your organization, and what you need to prove compliance.

Katrina Dalao

June 14, 2023 7 min

Privacy Management

What to include in your US privacy notice

Transparency is a key part of compliance with the range of US privacy laws entering into effect in 2023. Read this blog to learn what you need to include.

Bex Evans

June 13, 2023 6 min

Internal Audit Management

Beginner's guide to PCI DSS compliance

If your organization stores, processes, or transmits cardholder data, you’ll need to be PCI DSS compliant. Here’s how.

Katrina Dalao

June 13, 2023 9 min

Data Discovery & Classification

Discover and connect to all your data in any environment

OneTrust Data Discovery has mass coverage with 200 pre-built connectors, and an open SDK for custom data sources

Sam Curcuruto

June 08, 2023 2 min

Consent & Preferences

IAB TCF 2.2: What you need to know

IAB Europe updated their Transparency and Consent Framework to improve data privacy for users around how organizations collect and process data

Ryan Karlin

June 06, 2023 4 min

Trust Intelligence

TrustWeek registration now open

Ignite the power of trust intelligence at TrustWeek, the ultimate conference for privacy, security, marketing, ethics, and ESG professionals, driving measurable impact worldwide

June 06, 2023 2 min

Privacy & Data Governance

Preparing for new privacy legislation in Canada: Part two

Bill C-27 is set to overhaul privacy law in Canada. Part 2 of the bill proposes a substantial transformation in the enforcement of the CPPA through a new organization.

Neil Saddington

June 06, 2023 5 min

Consent & Preferences

What you need to know about first-party data

We cover the basics of first-party data and why it's so important in the digital age.

Param Gopalasamy

June 06, 2023 4 min

Data Discovery & Classification

How does Microsoft 365 integrate with OneTrust Data Discovery?

Learn how OneTrust Data Discovery integrates with Microsoft 365 to build an all-encompassing, centralized data catalog out of your unstructured data.

Sam Curcuruto

June 02, 2023 3 min

Third-Party Risk

HackNotice and OneTrust partner for deeper third-party threat intelligence

OneTrust customers can take advantage of HackNotice’s near real-time breach alerts.

June 01, 2023 3 min

Privacy Management

Assessing your international data transfers post-DPC ruling

The recent decision cast fresh doubt over the effectiveness of transfer safeguards and supplementary measures in conjunction with the practical application of third-country surveillance laws. 

Linda Thielova

June 01, 2023 8 min

Privacy Management

Florida looks to pass Digital Bill of Rights

The bill now awaits the Governor’s signature, which would allow consumers more visibility into their data that’s been collected by businesses 

Alexis Kateifides

May 31, 2023 5 min

Privacy & Data Governance

Google Play Store data requirements (and how to handle them)

The latest updates on Google Play Store app requirements, as well as how OneTrust Mobile App Consent can help your organization stay compliant

Ashlea Cartee

May 31, 2023 7 min

Privacy Management

Data Privacy and Security Act passed in Texas

The Texas Data Privacy and Security Act will become the fifth piece of US privacy legislation to pass this year and, once signed, will become effective on July 1, 2024.

Robb Hiscock

May 31, 2023 6 min

Privacy Management

3 priorities for the French DPO: Priority 3 – automate

Automation is key to freeing up valuable time and resources that can then be dedicated to other areas of your compliance program.

Robb Hiscock

May 30, 2023 6 min

Data Discovery trifecta: Retention, access, and minimization

Governing and de-risking your organization’s data should be top priority

Sam Curcuruto

May 26, 2023 3 min

Data Discovery & Classification

How a data discovery solution keeps your organization secure

Finding and classifying data is just the first step in your discovery and security process

Jason Koestenblatt

May 25, 2023 5 min

Data Discovery & Security

ROT data is a security issue: How are you handling it?

Automating data discovery is the first step in classifying obsolete digital information

Sam Curcuruto

May 23, 2023 3 min

Privacy Management

Reflecting on 5 years of the GDPR

Look back on five years of the EU’s General Data Protection Regulation with expert views infographics, eBooks, and more

Robb Hiscock

May 23, 2023 5 min

Consent & Preferences

First party data 101: What your marketing team needs to know

Read more to answer frequently asked questions around first-party data and how your organization can take advantage of it

Ashlea Cartee

May 23, 2023 6 min

Data Discovery & Classification

Data discovery helps governance teams stay secure

Data governance is needed for organizations to meet compliance requirements

Sam Curcuruto

May 18, 2023 3 min

Data Discovery & Classification

Why is data minimization important for your security teams?

Unused digital information is an easy target for hackers, increasing your organization’s risk 

May 16, 2023 2 min

Responsible AI

Embracing responsible AI: 3 steps to get your organization started

With the latest statement from the White House on responsible AI, it’s clear AI is firmly in the spotlight. Find out how your organization can establish a foundation to address AI risks.

Alexis Kateifides

May 16, 2023 4 min

Consent & Preferences

What the latest Google CMP requirements mean for your organization

Google announced their latest requirements around consent management platforms for organizations that utilize their network for ads

Ryan Karlin

May 16, 2023 3 min

Responsible AI

Top 10 AI governance essentials every CPO needs to know in 2023

Learn how to integrate AI governance into your product strategies to achieve responsible AI use

Linda Thielova

May 15, 2023 5 min

Privacy & Data Governance

OneTrust unveils latest platform innovations to drive responsible data use and business resilience

Enhancements to our Trust Intelligence Platform help organizations unlock the value of trust 

OneTrust Editorial Team

May 12, 2023

Ethics & Compliance

‘Culture of compliance’ behind DOJ’s voluntary self-disclosure updates

Is your compliance program ready to do the right thing and step up and own up to misconduct?

Jisha Dymond

May 12, 2023 8 min

GRC & Security Assurance

Data retention policies should be automated to reduce risk

Tooling can create benefits for the organization while staying compliant with regulations

Jason Koestenblatt

May 11, 2023 4 min

Ethics Program Management

Building a strategic framework for policy governance

Learn how a "policy on policies" can help create a framework for effective ethics policy governance and risk management.

Gbemi Yusuff

May 10, 2023 6 min

Privacy Management

A privacy professional's guide to navigating responsible AI adoption

Learn how privacy professionals can guide their organizations towards responsible AI adoption by developing a comprehensive AI strategy that integrates privacy considerations, fostering a privacy-focused culture around AI decision-making, and navigating the risks of AI.

May 09, 2023 6 min

Internal Audit Management

How to reduce audit fatigue: 5 remedies for InfoSec pros

How do you alleviate audit fatigue in your InfoSec team? Here are 5 practical remedies to reduce the stress and workload of frequent security audits

Katrina Dalao

May 08, 2023 8 min

Data Discovery & Classification

How automation helps reduce your sensitive data footprint

Establish data retention and minimization policies to reduce your organization’s attack surface

Sam Curcuruto

May 05, 2023 4 min

Privacy Management

Navigating the NIST AI Risk Management Framework with confidence

The NIST AI Risk Management Framework can help your organization to manage the risks associated with AI. Read the blog to learn how.

Laurence McNally

May 05, 2023 5 min

Data Discovery & Classification

Expanding our data discovery leadership with machine learning classification tools

Learn how OneTrust Data Discovery uses AI, machine learning, and privacy by design to ensure responsible and compliant data governance.

Sam Curcuruto

May 04, 2023 3 min

Privacy & Data Governance

Indiana set to become the 7th state to pass a comprehensive privacy law

The Indiana Consumer Data Protection Act will be set to take effect in 2026.

Alexis Kateifides

May 04, 2023 3 min

Internal Audit Management

What is information security compliance?

What is InfoSec compliance? Learn why compliance is essential for your organization and how it safeguards against cyberthreats.

Katrina Dalao

May 04, 2023 7 min

Privacy Management

Making privacy and trust a strategic imperative

Privacy has evolved beyond compliance. See what Forrester analyst Enza Iannopollo had to say about making privacy and trust a strategic imperative

Robb Hiscock, featuring Enza Iannopollo

May 03, 2023 7 min

ESG & Sustainability

What is the EU Sustainable Finance Disclosure Regulation (SFDR)?

Learn about the EU Sustainable Finance Disclosure Regulation (SFDR), what it means for ESG investments, and how companies can comply.

Chris Fenwick, Head of ESG Center of Excellence, OneTrust

April 28, 2023 7 min

Privacy Management

Tennessee passes Information Protection Act

Discover the impact of the Tennessee Information Protection Act (TIPA), passed on April 21, 2023, as it reshapes the US privacy landscape with new requirements for businesses, including risk assessments, data minimization, and opt-in consent for processing sensitive information, effective July 1, 2025.

Robb Hiscock

April 26, 2023 5 min

ESG Program Management

What is the EU Carbon Border Adjustment Mechanism (CBAM)?

Learn how your organization can prepare for new regulations around carbon emissions in imported goods 

Chris Fenwick

April 25, 2023 4 min

Privacy & Data Governance

Montana looks to pass Consumer Data Privacy Act

The bill is now on track to be the next state to sign a comprehensive state privacy bill into law

Alexis Kateifides

April 25, 2023 5 min

Consent & Preferences

OneTrust Consent and Preferences now integrates with Tealium IQ

Tealium IQ launched Consent Integrations for their tag management system, enabling seamless privacy-first marketing campaigns

Ashlea Cartee

April 21, 2023 3 min

Data Discovery & Security

3 priorities for the French DPO: 2. Take action

Take control of your organization’s data protection program by following these three priorities. The second priority – take action.

Robb Hiscock

April 20, 2023 8 min

Data Discovery & Security

Preparing for new privacy legislation in Canada: Part one

How Canadian companies should respond to the new Consumer Privacy Protection Act (Bill C-27).

Neil Saddington

April 20, 2023 5 min

Privacy & Data Governance

Vietnam publishes long-awaited Personal Data Protection Decree

Vietnam has finally published its Personal Data Protection Decree (PDPD). We cover its key points and how business can prepare for compliance.

Robb Hiscock

April 19, 2023 8 min

Third-Party Due Diligence

OneTrust partners with Dow Jones Risk & Compliance for data-driven third-party due diligence

Today, we’re excited to announce the partnership between Dow Jones Risk & Compliance and OneTrust Third-Party Due Diligence.

Kelly Maxwell

April 18, 2023 6 min

Data Discovery & Classification

5 ways to harness data classification to mitigate data sprawl

We explore the issue of data sprawl and how data classification automation tools can help mitigate it.

Bex Evans

April 18, 2023 6 min

Trust Intelligence

Making trust real: An unwavering journey — for us 

See how OneTrust leaders build trust by focusing on people, product, and process.

April 17, 2023 4 min

Privacy & Data Governance

My Health My Data Act passes Washington State Senate

The My Health My Data Act, also known as House Bill 1155, provides stronger privacy protections for consumers in relation to their personal health data. 

Alexis Kateifides

April 14, 2023 9 min

Consent & Preferences

Austrian DSB ruling on international data transfers via tracking tools

Data transfers to the US via a tracking pixel tool by a prominent global technology company were found to be in violation of the GDPR by the Austrian DSB.

Linda Thielova

March 22, 2023 3 min

Consent & Preferences

OneTrust + Adobe = Automated consent orchestration

OneTrust Consent and Preferences integrates with Adobe Experience Platform so businesses can provide personalized experiences and comply with regulations.

Alex Cash

March 20, 2023 3 min

Privacy & Data Governance

Making it easier to responsibly use data with new data discovery capabilities

OneTrust's data discovery capabilities make it easier for businesses to understand and use data responsibly by connecting and classifying existing data.

Ojas Rege

March 20, 2023 4 min

Privacy & Data Governance

Governor signs comprehensive privacy bill in Iowa

Governor Reynolds of Iowa signed SF262, An Act Relating To Consumer Data Protection offering a more business-friendly approach to privacy.

Robb Hiscock, Content Marketing Specialist, CIPP/E, CIPM, OneTrust

March 17, 2023 5 min

Data Discovery & Classification

What is data discovery?

Businesses are dealing with unprecedented amounts of digital information that needs to be monitored, managed, and secured.

Jason Koestenblatt, Team Lead, Content Marketing, OneTrust

March 10, 2023 8 min

Consent & Preferences

Transform retail experiences with consent and preferences

Retailers can build trust with customers by complying with data privacy regulations and providing a transparent consent and preference management process.

Ashlea Cartee

March 10, 2023 8 min

Consent & Preferences

The ROI of purpose-based consent and preference management

Learn how consent management is essential to build trust and delivering personalized customer experiences by collecting and using data responsibly.

Ashlea Cartee, Senior Product Marketing Manager, OneTrust

March 10, 2023 7 min

Third-Party Risk

How to manage third-party risk across your entire business

Businesses need a comprehensive third-party management strategy covering all aspects of their relationships with third parties, such as security, privacy, ethics, and ESG.

March 08, 2023 7 min

Privacy & Data Governance

UK Data Protection and Digital Information Bill re-introduced to Parliament

The UK Data Protection and Digital Information Bill  aims to reduce the administrative burden on businesses, promote international trade and reduce consent notices.

Robb Hiscock

March 08, 2023 5 min

ESG & Sustainability

The ultimate guide to board diversity and skills requirements

ESG governance is becoming increasingly important as companies face pressure from stakeholders to address environmental, social, and governance issues.

Chris Fenwick

March 08, 2023 23 min

Third-Party Risk

Why data privacy and third-party risk teams need to work together

Sharing information and resources across organizational silos is mutually beneficial for teams with the common goal of mitigating data privacy risk.

Scott Solomon

March 07, 2023 6 min

GRC & Security Assurance

How to manage privacy and security compliance? 6 questions with GRC experts

Our GRC experts discuss how privacy and security compliance are evolving to meet modern market demands and ushering in a whole new era of automation.

Katrina Dalao, Sr. Content Marketing Specialist, OneTrust

March 07, 2023 8 min

Privacy & Data Governance

Cyberspace Administration of China releases final SCCs

The Standard Contractual Clauses (SCC) and their measures set additional rules for transferring personal information data from the People's Republic of China.

Linda Thielova

March 06, 2023 7 min

GRC & Security Assurance

Understanding IT security frameworks: Types and examples

Security frameworks are roadmaps for developing and implementing effective security programs that protect organizations from threats and vulnerabilities.

Katrina Dalao

March 06, 2023 11 min

GRC & Security Assurance

5 ways leaders are automating their GRC programs in 2023

Learn five top functional categories GRC professionals and leaders identify as priorities for creating a mature and meaningful automation strategy.

March 02, 2023 4 min

Ethics & Compliance

Speak-up culture 101: Why speak-up culture matters and how to build yours

Learn how to build, measure, and grow your speak-up program to foster trust, shared responsibility, and the highest standards of ethical conduct.

Gbemi Yusuff

March 02, 2023 9 min

Privacy & Data Governance

How to approach the ICO’s “Privacy in the product design lifecycle”

Learn more about the ICO's "Privacy in the product design lifecycle" guidance and how you can implement Privacy by Design (PbD) in your organization.

Robb Hiscock

March 01, 2023 11 min

GRC & Security Assurance

10 GRC trends: What’s next for governance, risk, and compliance?

Cybersecurity, third-party risk, and other policies fall under the GRC domain. Here are the top 10 emerging drivers and trends shaping security compliance.

Katrina Dalao

February 23, 2023 5 min

Privacy & Data Governance

Global Privacy Platform (GPP): What this means for ad tech and US privacy laws

IAB Tech Lab, the digital advertising technical standards-setting body, recently announced the launch of its Global Privacy Platform (GPP).

Ashlea Cartee

February 23, 2023 4 min

Privacy & Data Governance

3 priorities for the French DPO: 1. Gain visibility

DPOs must have visibility into what teams are doing and work closely with the CISO to help direct organizational processes toward data protection and security.

Noshin Khan

February 22, 2023 9 min

Trust Intelligence

OneTrust kicks off new year with strong momentum, building on successes from 2022

In 2023, we are focused on continuing to innovate across this platform, focusing on the core areas of privacy, security, ethics, compliance, and ESG. 

February 20, 2023 5 min

Ethics Program Management

Speak-up culture toolkit: Policy management

Learn how effective policy management drives employee engagement and strengthens your company speak-up culture.

Noshin Kahn

February 20, 2023 7 min

GRC & Security Assurance

OneTrust introduces Certification Automation

OneTrust Certification Automation facilitates the compliance and audit process to help you achieve security certifications in half the time. 

Katrina Dalao

February 16, 2023 3 min

Third-Party Risk

Supply Wisdom risk intelligence is now available in OneTrust’s Third-Party Risk Exchange

The partnership with Supply Wisdom brings compliance, financial, location-based ESG, and cyber risk data to Exchange customers and their third parties.

Chet Devchand, Director, Business Development Management

February 14, 2023 3 min

Third-Party Due Diligence

Speak-up culture toolkit: Inviting third parties to contribute

Creating a strong, healthy speak-up culture requires you to empower all participants, including third parties, to raise issues related to ethics and compliance.

Gbemi Yusuff

February 13, 2023 6 min

GRC & Security Assurance

7 steps to comply with ISO 31700-1:2023 (standard on Privacy by Design)

This standard looks to define clear rules for organizations around how consumers’ personal information is processed and how consumer privacy is addressed throughout the product lifecycle

Linda Thielova

February 10, 2023 7 min

ESG & Sustainability

The EU Taxonomy: What you need to know

With two objectives of the EU Taxonomy in effect, make sure your organization is on top of compliance with new ESG reporting requirements.

Chris Fenwick, OneTrust Head of ESG Center of Excellence

February 09, 2023 6 min

Privacy & Data Governance

What California’s CCPA investigative sweep means for your mobile applications

The California Attorney General declared an investigative sweep of mobile apps that don't comply with certain CCPA opt-out and consumer request provisions.

Alex Cash

February 01, 2023 5 min

Consent & Preferences

The ultimate guide to US opt-out requirements

Five new US state privacy laws mean five new sets of opt-out requirements. Learn how to make sure your organization maintains compliance in 2023.

Ashlea Cartee

January 31, 2023 10 min

ESG & Sustainability

ESG reporting 101: Guide to ESG standards and sustainability frameworks

As norms and standards continue to evolve, you should be prepared to respond with your own ESG reporting strategy and management.

Julie Yamamoto

January 30, 2023 23 min

Privacy & Data Governance

Colorado AG releases third version of draft CPA regulations

The latest version of the draft Colorado Privacy Act regulations is based on the outcome of the public consultation held between October 2022 and January 2023.

Robb Hiscock, Content Marketing Specialist | CIPP/E, CIPM

January 30, 2023 13 min

Privacy & Data Governance

Your guide to celebrating Data Privacy Day 2023

Data Privacy Day 2023 is a great chance to raise awareness of privacy and data protection issues from around the world and your organization.

Robb Hiscock, Content Marketing Specialist | CIPP/E, CIPM

January 25, 2023 7 min

ESG & Sustainability

Ultimate guide to the EU CSRD ESG regulation for businesses

This guide provides everything your business needs to know about the upcoming EU ESG regulation - the Corporate Sustainability Reporting Directive (CSRD).

Julie Yamamoto, ESG Content Marketing Manager, OneTrust

January 20, 2023 16 min

Ethics & Compliance

Speak-up culture toolkit: Leveraging disclosure data to drive a speak-up culture

Healthy disclosure rates are an indicator of a strong speak-up culture. Discover how to improve disclosure participation and engagement.

Noshin Khan

January 17, 2023 4 min

Privacy & Data Governance

Addressing UK app Code of Practice requirements with OneTrust

OneTrust has developed an Android SDK scanner to comply with Google Play Data safety while supporting the new UK app Code of Practice.

Julian Evans

January 13, 2023 6 min

Privacy & Data Governance

Belgian DPA approves action plan for IAB Europe’s TCF

After violating the GDPR, the Belgian DPA approved an action plan to bring the processing of personal data within the IAB TCF into compliance with the GDPR.

Alex Cash, Director of Strategy, Consent & Preferences | CIPP/E, CIPM

January 12, 2023 7 min

Ethics & Compliance

Continuous improvement: The leading indicator for successful compliance programs

Continuous improvement is a method of operationalizing improvement to processes, products, or other aspects of a business through a cycle of repeatable steps.

Gbemi Yusuff

January 11, 2023 6 min

Third-Party Risk

Build trust, promote your program in the Third-Party Risk Exchange

The Third-Party Risk Exchange allows businesses to learn more about each other's security posture, offer SIG Lite assessments on-demand, and more.

Pranav Menem

January 10, 2023 3 min

Consent & Preferences

Consent management by the numbers: 2022 DMA report summary

We partnered with the Data & Marketing Association (DMA) (UK) to research how marketers manage their data and the value they realize using CMP systems.

Ashlea Cartee, Senior Product Marketing Manager, OneTrust Consent and Preferences

January 09, 2023 4 min

Trust Intelligence

Building trust in a zero trust world

OneTrust CEO Kabir Barday recently participated in a panel discussion with Deloitte at CES, discussing how to build digital trust to drive business performance.

Kabir Barday CEO, OneTrust

January 09, 2023 4 min

Privacy & Data Governance

Navigating the California Privacy Rights Act as a HIPAA-compliant business

CPRA’s health information exemption is not a blanket entity exemption, meaning HIPAA-compliant organizations may still need to consider its requirements.

Bex Evans, Senior Product Marketing Manager | CIPP/E, CIPM

January 09, 2023 5 min

Privacy & Data Governance

US state privacy bills on the horizon in 2023

Stay up to date with the latest news in US state privacy law, with bill highlights, legislation status, and resources to help your organization stay compliant.

Param Gopalasamy

January 06, 2023 4 min

ESG & Sustainability

EFRAG approved the European Sustainability Reporting Standards

EFRAG has released first draft European sustainability reporting standards as part of the EU Corporate Sustainability Reporting Directive.

Chris Fenwick

January 06, 2023 8 min

Speak-Up Program Management

Speak-up culture toolkit: Helpline and case management

Everyone wins when you shine a light on your ethics and compliance helpline and build a speak-up culture that reflects your organization's values.

Kelly Maxwell, Content Marketing Specialist

January 05, 2023 6 min

Consent & Preferences

3 steps to stay compliant while using consent-driven targeted marketing

Learn how your organization can utilize targeted ads while still being compliant by following these three steps to ensure you prioritize your user's privacy.

Alex Cash

January 04, 2023 4 min

Third-Party Risk

As third-party needs sprawl, so do risk management investments

From a new focus on ESG to a renewed need for cybersecurity, third-party and vendor risk management solutions have become a priority for organizations.

Jason Koestenblatt

January 04, 2023 3 min

Privacy Automation

The dos and don’ts of CPRA privacy rights requests 

The CPRA has new consumer rights for California residents and employees, meaning new obligations and rights requests are coming your organization's way.

Robb Hiscock

January 03, 2023 7 min

Data Discovery & Security

How OneTrust helps reduce your sensitive data footprint

More data, more costs, more risk. More value? That’s up to how your organization makes use of data retention and minimization principles.

Rebecca Evans

December 23, 2022 4 min

Privacy & Data Governance

Conducting PIA, DPIA, and TIA to inform notices

Privacy Impact Assessments, Data Protection Impact Assessments, and Transfer Impact Assessments are vary greatly in terms of what, why, and when.

Robb Hiscock, Content Marketing Specialist | CIPP/E, CIPM

December 21, 2022 9 min

Ethics & Compliance

The ultimate guide to complying with the EU Whistleblower Directive

Due to the Directive, your whistleblower hotline, retaliation policies, and compliance program may require a revamp, even if your employees are not in the EU.

December 19, 2022 15 min

ESG & Sustainability

CSRD: EU ESG disclosure rule is approved

The European Parliament and Council adopted the CSRD to make businesses more publicly accountable for their societal and environmental impacts.

Alexis Kateifides, Senior Counsel, OneTrust Centers of Excellence

December 18, 2022 6 min

Privacy & Data Governance

CCPA toll-free number requirement

The California Privacy Rights Act (CPRA) follows up the CCPA with new and expanded rights, retaining the toll-free number requirement.

Param Gopalasamy, CIPP/E, CIPM

December 15, 2022 4 min

Ethics & Compliance

Maximizing your compliance budget in 2023

If your team receive cuts, follow these recommendations to prioritize resources for critical activities, do more with less, and continue to achieve key outcomes.

December 14, 2022 6 min

ESG & Sustainability

Ultimate guide to ESG sustainability

As global organizations begin to adopt key ESG principles, it's critical to pivot your business strategy to address sustainability.

Julie Yamamoto

December 13, 2022 35 min

Privacy & Data Governance

The ultimate guide to US privacy

Our guide will help you better understand the five state privacy laws and how they will define the US privacy landscape in lieu of a federal privacy framework.

Robb Hiscock

December 09, 2022 22 min

Third-Party Due Diligence

Best practices for conducting third-party due diligence for ethics and compliance

A well-designed compliance program should apply risk-based due diligence and have a process for the full lifecycle of third-party risk management

Kelly Maxwell

December 08, 2022 9 min

ESG & Sustainability

3 key takeaways from COP27

Learn three key takeaways from COP27, which includes reinforcing the growing demand for true and accurate reporting on climate risks for investors.

Chris Fenwick

December 06, 2022 8 min

Trust Intelligence

Trending toward trust: What organizations need to watch in 2023

Trending Toward Trust is the new 2023 report from OneTrust, highlighting some of the most significant trends that will shape trust in organizations.

Robb Hiscock

December 05, 2022 4 min

Third-Party Risk

Ironclad, OneTrust partner to streamline and secure third-party procurement processes

To help organizations take a holistic approach to the third-party contracting and risk management process, OneTrust has partnered with Ironclad.

Chet Devchand

November 30, 2022 4 min

Privacy & Data Governance

Navigating the CPRA as a GLBA-compliant business

The California legislature amended the CCPA , recognizing the conflict between the CCPA and sectoral frameworks such as the Gramm-Leach-Bliley Act.

Robb Hiscock

November 29, 2022 5 min

ESG & Sustainability

Proposed UK Disclosure Framework Focuses on Corporate Climate Transition | Blog | OneTrust

At COP27, the UK announced The Transition Plan Taskforce Disclosure Framework aiming to strengthen reporting requirements for companies in the UK.

Chris Fenwick, OneTrust Head of ESG Center of Excellence

November 29, 2022 7 min

Privacy & Data Governance

From Sapin II to Sapin III: France’s anti-corruption fight

Sapin III will soon expand the French commitment to detect and punish corruption – how will you and your compliance team need to adapt?

Kelly Maxwell

November 28, 2022 8 min

GRC & Security Assurance

7 myths about SOC 2 compliance

Understand what your company needs to achieve SOC 2 compliance and protect customer data. Read more about the seven myths about SOC 2 compliance.

November 25, 2022 4 min

Third-Party Risk

What every Chief Privacy Officer should know about third-party risk management

CPOs track risk via data mapping, in which data is discovered, assessed, and tracked as it flows throughout the organization, including to third parties.

Jason Koestenblatt, Team Lead, Content Marketing

November 18, 2022 6 min

Ethics & Compliance

The role of disclosures in risk assessment and mitigation

An effective COI program will identify and mitigate these organizational risks through effective employee engagement, analysis, and periodic review.

Noshin Khan

November 17, 2022 5 min

ESG & Sustainability

US Climate Risk Rule Could Affect More Than 5,700 Federal Suppliers | Blog | OneTrust

The US proposes a climate risk rule requiring major suppliers to disclose greenhouse gas emissions and set science-based emissions reduction targets.

Chris Fenwick

November 15, 2022 5 min

ESG & Sustainability

The COP27 climate summit: What to expect and why it matters

The annual COP is the largest and most important climate action event of the year and is a critical step in prioritizing collective efforts to fight climate change. 

Chris Fenwick, OneTrust Head of ESG Center of Excellence

November 14, 2022 10 min

Privacy & Data Governance

3 steps for mitigating the impact of ransomware attacks through data discovery

Ransomware attacks are costly to a company's bottom line and reputation, but having greater knowledge of your dataset can reduce the impact of an attack.

Bex Evans

November 09, 2022 5 min

GRC & Security Assurance

SOC 2: starting your audit process

SOC 2 is a voluntary compliance standard for managing customer data while outlining the minimum requirements to maintain your customers' security.

November 09, 2022 4 min

Ethics Program Management

Department of Justice: 2022 updates to corporate compliance guidance

After this year's DOJ updates, corporate compliance officers must update their executive teams and boards of directors on the new approach to enforcement.

Kelly Maxwell

November 08, 2022 8 min

Privacy Management

The Ultimate Guide to PIPEDA Compliance

PIPEDA is a Canadian federal privacy law that aims to regulate the use of personal information in commercial activity by private-sector organizations.

Robb Hiscock, Content Marketing Specialist | CIPP/E, CIPM

November 03, 2022 14 min

Privacy & Data Governance

CCPA regulations: A timeline of amendments

Since its passing, the CCPA and its accompanying regulations have undergone several modifications. Here's your guide to understanding them better.

Param Gopalasamy

November 03, 2022 11 min

Internal Audit Management

Buyer’s Guide: SOC 2 compliance software

Find the right SOC 2 compliance software that provides the features that best serve your business.

November 03, 2022 3 min

GRC & Security Assurance

9-point framework for evaluating SOC 2 software

The founder of Fractional CISO, Rob Black, identified nine key considerations to guide the vendor evaluation process and reach your SOC 2 compliance goals. 

November 02, 2022 5 min

Third-Party Risk

Thousands of RiskRecon grades now available in the OneTrust Third-Party Risk Exchange

We are partnering with RiskRecon, a Mastercard Company to make cybersecurity ratings available out-of-the-box to all Third-Party Risk Exchange customers.

Chet Devchand

November 01, 2022 3 min

Privacy & Data Governance

US Privacy Masterclass: Your four essential questions answered

In this blog, we’ll go over questions around the GLBA, NIST, GPC, and PIAs in California and HIPAA and explain how your organization can comply.

Garrett Groos

October 31, 2022 4 min

Privacy & Data Governance

Navigating the CPRA’s “Do Not Sell or Share” requirement

On January 1, 2023, the California Privacy Rights Act (CPRA) will expand and amend several aspects of the CCPA, including consumer rights.

Param Gopalasamy

October 28, 2022 5 min

Privacy & Data Governance

Navigating the CPRA’s “Do Not Sell or Share” requirement

CCPA consumer rights such as the right to opt out of the sale of personal information, have resulted in critical challenges. Learn how OneTrust helps.

Param Gopalasamy

October 28, 2022 5 min

Consent & Preferences

Use first-party data for a powerful digital experience

Collecting, managing, and activating first-party data will enhance customer experience by providing customers with the right experience at the right time.

Ashlea Cartee, Product Marketing Manager, Consent and Preferences

October 26, 2022 9 min

Third-Party Risk

Trust talks: Actioning trust-based cybersecurity from individual to enterprise

Security teams can help create and champion organizational trust despite interdepartmental silos

Jason Koestenblatt

October 25, 2022 4 min

GRC & Security Assurance

What are the ISO 27001 updates?

The International Organization for Standardization (ISO) released its first framework, the 27001, that outlined a cybersecurity foundation for businesses.

Jason Koestenblatt, Team Lead, Content Marketing

October 25, 2022 4 min

GRC & Security Assurance

Cybersecurity Awareness Month resource hub

The cybersecurity awareness hub pulls resources from our experts on the Security CoE, GRC, Privacy, DataGuidance, and TPRM teams to a central resource.

Jason Koestenblatt, Team Lead, Content Marketing

October 25, 2022 3 min

GRC & Security Assurance

ISO 27001: Scoping and mandatory clauses

Prepare for ISO 27001 certification with a scope statement that defines your company’s information security management system.

October 24, 2022 3 min

Third-Party Risk

Put a hold on hacks: Fight the phish and other emerging cyber threats

In 2021, there was a 62% global attack spike in ransomware (158% increase in North America), and an increased focus on attacks by regulatory bodies.

Jason Koestenblatt, Team Lead, Content Marketing

October 21, 2022 6 min

GRC & Security Assurance

October is Cybersecurity Awareness Month. So, what?

The Cybersecurity and Infrastructure Security Agency’s (CISA) created cybersecurity awareness month with the intent to educate and promote online safety.

Scott Solomon

October 19, 2022 3 min

Privacy & Data Governance

Is GDPR relevant for your US-based tech startup?

Learn about the pivotal EU law, GDPR, that could affect how your company approaches customer data protection and privacy US-based company.

October 19, 2022 2 min

GRC & Security Assurance

Digital transformation and the evolving cybersecurity landscape

As the technological landscape continues to evolve, teams are seeing increases in compliance obligations, regulations, and the proliferation of cloud technology.

Scott Solomon

October 19, 2022 3 min

Ethics & Compliance

Holiday disclosures: Avoid conflicts of interest during gift-giving season 

With the season of holiday parties and corporate gifting around the corner, autumn and winter are jam-packed with potential conflicts of interest. 

Kelly Maxwell

October 18, 2022 5 min

Introducing the New OneTrust Brand

The changes to our new OneTrust logo and brand identity represent the next era of our company as the market-defining leader in Trust Intelligence.

Lisa Campbell

October 12, 2022 2 min

Privacy & Data Governance

OneTrust partners with Microsoft to enhance customer experience with Microsoft Intelligent Data Platform

OneTrust and Microsoft are partnering to expand the options available to Chief Data Officers (CDOs) to address this challenge of visibility and governance.

Chet Devchand, Head of Technology Partnerships

October 12, 2022 3 min

Ethics & Compliance

Compliance best practices: Presenting to a board of directors

Giving a compliance presentation to the board of directors can be a nerve-wracking experience, but these ten guidelines will set you up for success.

Phillip Winterburn

October 11, 2022 9 min

ESG Program Management

Embedding ESG transformation into the future enterprise

An organization's ability to demonstrate its ESG credentials transparently has become a vital business differentiator and a critical part of trust conversations.

Vladimir Kroa

October 10, 2022 6 min

GRC & Security Assurance

What can and can’t be automated for SOC 2

Not all SOC 2 components can be automated, but those that can save your business time and money. Learn more about what can be automated for SOC 2.

October 05, 2022 4 min

Carbon Accounting

Corporate climate goals: Building your net zero story

When addressing climate change impact across the enterprise, it's important to consider not only your internal impact, but external influences.

Julie Yamamoto, ESG Content Marketing Manager

October 04, 2022 11

Third-Party Due Diligence

Triage: The first step for effective third-party due diligence

According to the DOJ’s guidance, it’s necessary to prioritize due diligence, questionnaires, and contracting with the third parties that present highest risk.

Jenna Thomas

September 29, 2022 4 min

GRC & Security Assurance

What is a SOC 2 report?

Systems and Organization Controls 2  is an attestation that evaluates your company’s ability to securely manage the data you collect from your customers.

September 28, 2022 6 min

Privacy & Data Governance

HIPAA vs. HITRUST: What’s the difference?

Learn how HIPAA and HITRUST frameworks compare, which is required for your information security compliance and protection of patient health information.

September 27, 2022 4 min

Third-Party Risk

Why choose OneTrust for third-party management?

OneTrust simplifies third-party management by enabling control and visibility throughout the entire third-party lifecycle while you manage third parties.

Scott Solomon, Senior Manager, Product Marketing

September 23, 2022 5 min

GRC & Security Assurance

How much does ISO 27001 certification cost?

Companies are choosing to adopt a trusted security framework, and ISO 27001, as a globally recognized certification, is the framework of choice for many. 

September 21, 2022 6 min

GRC & Security Assurance

How to use your security program to win more deals

As more customers are concerned with data protection, a security-focused sales process can help win more deals.

September 21, 2022 2 min

GRC & Security Assurance

HIPAA vs. GDPR compliance: what’s the difference?

HIPAA and GDPR are leading frameworks that protect the privacy of individuals. Learn the difference between the two.

September 21, 2022 6 min

GRC & Security Assurance

6 questions, 2 InfoSec directors: Your policy management answers

In a OneTrust-hosted webinar, we discussed the common pitfalls of policy management for InfoSec teams with the Director of Information Security at Arcadia.

Jason Koestenblatt

September 21, 2022 8 min

Privacy & Data Governance

US privacy masterclass 2.0: webinars + roadshows

Get the latest information about updated consumer rights, expanded employee rights, and privacy risk assessments, and learn to operationalize them.

Anne Kenyon

September 20, 2022

Privacy & Data Governance

Children’s online safety at the forefront of California law

California's new law, AB 2273, known as the California Age-Appropriate Design Code Act (CAADCA), protects minors and their data on the Internet.

Ojas Rege

September 20, 2022 3 min

GRC & Security Assurance

Understanding ISO 27001 Annex A Controls | Blog | OneTrust

Learn the key points of ISO 27001 Annex A controls and how they affect the overall audit process for your organization.

September 15, 2022 5 min

GRC & Security Assurance

What is Statement of Applicability?

Your Statement of Applicability for ISO 27001, otherwise known as your SoA, is a mandatory step for anyone planning on pursuing ISO 27001 certification.

September 14, 2022 6 min

GRC & Security Assurance

What is change management?

A defined change management process enables your organization to mitigate risk and reduce disruption.

September 14, 2022 4 min

GRC & Security Assurance

SyncMonkey saves $100K, hundreds of hours with SOC 2 compliance automation

Centralized information management system SyncMonkey took a proactive approach to security by investing in certification automation

September 13, 2022 3 min

Internal Audit Management

ISO 27001 vs. NIST Cybersecurity Framework

ISO 27001 and NIST CSF are two cybersecurity guidelines with significant overlap. Learn how they work together to increase information security

September 12, 2022 5 min

Internal Audit Management

Understanding your auditor’s SOC 2 report opinion

Learn the four types of SOC 2 report opinions during the audit process and what they mean to your business and customers.

September 12, 2022 4 min

Privacy & Data Governance

CPRA employee privacy rights moving ahead

The CPRA will extend new rights for employees which will present a unique set of challenges for organizations. Read the blog to learn more.

Tess Macapinlac, OneTrust Lead Privacy Counsel

September 08, 2022 5 min

Governance & Policy Management

HIPAA vs. ISO 27001: What’s the difference?

HIPAA and ISO 27001 are complementary frameworks that form an undeniably strong security posture

September 08, 2022 4 min

GRC & Security Assurance

Building an information security program from scratch

In this blog, we’ll discuss the three stages of building your InfoSec program in more understandable terms, so you can get started getting more secure.

September 07, 2022 6 min

Ethics & Compliance

Compliance program performance metrics: How to measure compliance

Effectively Measuring compliance can prevent reputational damage, protect the bottom line, and potentially avoid costly fines and enforcement action.

Kelly Maxwell

September 07, 2022 7 min

Internal Audit Management

The ISO 27001 audit process

An ISO 27001 audit ensures your organization has the necessary information security management and relevant policies in place

September 07, 2022 5 min

Carbon Accounting

What are scope 1, 2, and 3 emissions?

The GHG Protocol Corporate Standard defines three types of GHG emissions - Scope 1 (direct emissions) and Scope 2 and Scope 3 (indirect emissions).

Julie Yamamoto, ESG Content Marketing Manager

September 06, 2022 14 min

Third-Party Risk

Reduce unnecessary risk with third-party risk management controls

As more tasks are outsourced to third-party providers, risk management programs become critical to securing sensitive data

September 03, 2022 4 min

ESG & Sustainability

Jump start your ESG program and reporting in 5 easy steps

ESG programs can be challenging to build and manage as they cross organizational boundaries and have multiple internal and external stakeholders.

Julie Yamamoto, ESG Content Marketing Manager, OneTrust

August 31, 2022 5 min

Ethics & Compliance

How to comply: German Supply Chain Due Diligence Act and forthcoming EU rules

New regulations around the world are focused on human rights, environmental risks, and labor rights, creating a new set of obligations for companies.

Kelly Maxwell, Content Marketing Specialist, OneTrust

August 29, 2022 7 min

Consent & Preferences

How does consent affect data retention?

Organizations must be able to justify and maintain meticulous records of how and why they’re using data downstream from the point of collection.

Ashlea Cartee, OneTrust Product Marketing Manager, Consent and Preferences

August 29, 2022 5 min

ESG & Sustainability

The corporate carbon footprint: a quick guide

A company’s Corporate Carbon Footprint (CCF), is the total amount of GHG emissions that are directly or indirectly caused by a company’s activities.

Marc Issel, Director of Carbon Intelligence, OneTrust

August 25, 2022 7 min

Consent & Preferences

Global Privacy Control: How to honor consumer opt-out requests

The Global Privacy Control (GPC) empowers users to signal their chosen privacy settings to websites and services through their browser. 

Alex Cash, OneTrust Director of Strategy

August 25, 2022 2 min

Data Discovery & Security

6 questions to ask yourself when building a Data Governance framework

Let’s explore building your own data governance framework, including the benefits and questions to ask yourself and your team when undergoing the process. 

Kevin Jones

August 19, 2022 4 min

Privacy & Data Governance

Top 4 benefits of Data Governance tools

Data governance tools can help you enhance the privacy, security, and integrity of your data while adding value to your business.

Kevin Jones, Director, Product Management, Privacy & Data Governance Cloud

August 17, 2022 5 min

Trust Intelligence

Your ultimate guide to careers at OneTrust

OneTrust is a team of people who are collectively passionate about innovation and technology while supporting career development and growth.

August 11, 2022

Cookie Consent

August cookie complaints from noyb: What you need to know

On August 9, 2022, Max Schrems’ noyb lodged 226 GDPR-related complaints with 18 authorities against websites for cookie banner compliance.

Ojas Rege

August 10, 2022 2 min

Ethics & Compliance

Whistleblower risk for private companies

Privately-owned companies in the U.S. and Europe are potential targets for the Sarbanes-Oxley Act (SOX) and EU Directive retaliation lawsuits.

August 04, 2022 8 min

Consent & Preferences

Google delays deprecation of cookies until 2024

On July 27, 2022, Google announced that they are postponing the deprecation of third-party cookies on Google Chrome to 2024. Here's what to know.

Ashlea Cartee

August 01, 2022 3 min

Privacy & Data Governance

The ADPPA advances to the house floor

The ADPPA is emerging to have the strongest chance of success after being passed after the House Energy and Commerce Committee voted 53-2 in its favor. 

Alexis Kateifides

July 21, 2022 3 min

Privacy & Data Governance

Policy attestation: If you can’t measure it, you can’t manage it

A successful policy management program will help you establish governance, achieve compliance, and reduce business risk.

Michele Muriyan, Product Marketing Manager, GRCP

July 21, 2022 4 min

Privacy & Data Governance

Comparing ISO 37002 and the EU Whistleblower Directive

The ISO 37002 is a framework for setting up and maintaining a whistleblowing hotline that adheres to the highest standards as outlined by the ISO.

Kelly Maxwell

July 19, 2022 3 min

ESG & Sustainability

ESG 101: What does social in ESG mean?

This ESG 101 blog takes a closer look at the Social in ESG: what it is, why social impact is important, and how to map it to Sustainable Development Goals.

Jamie Molnar

July 12, 2022 13 min

Privacy & Data Governance

The California Privacy Protection Agency (CPPA) files notice of proposed rulemaking for the CPRA

The CPPA announced on July 8, 2022, that it is beginning the process to adopt regulations to implement the Consumer Privacy Rights Act of 2020 (CPRA).

Alexis Kateifides, OneTrust Senior Center of Excellence Counsel

July 11, 2022 2 min

Third-Party Due Diligence

How to manage and measure third-party risk

To become a trust-based business, protect your brand's reputation, and ensure compliance, you'll need to vet and monitor your third-party relationships. 

Kelly Maxwell

July 10, 2022 6 min

Privacy & Data Governance

The top 6 data governance best practices

We will look at the top six best data governance practices to ensure your organization's program delivers and is efficient and effective.

Sam Gillespie, OneTrust Offering Manager, Privacy & Data Governance

July 08, 2022 4 min

Ethics & Compliance

Wendy Addison and LeisureNet: A Whistleblower’s story of Retaliation

After blowing the whistle on South Africa's LeisureNet, Wendy Addison lost her job, survived poverty, and spent decades rebuilding her life and career.

Kelly Maxwell, Content Marketing Specialist, OneTrust

July 07, 2022 7 min

Ethics & Compliance

The EU Whistleblower Directive and GDPR: How to protect whistleblowing data

It’s essential that your organization's whistleblowing processes account for the requirements of both GDPR and the EU Whistleblower Directive.

Jenna Thomas

July 05, 2022 4 min

GRC & Security Assurance

What are the benefits of a GRC management tool?

GRC tools eliminate the worry of managing regulatory requirements and provide actionable insights to improve your GRC approach, aligning key risk initiatives.

Kaitlyn Archibald

June 30, 2022 4 min

Ethics & Compliance

Finding a hotline vendor that will help you comply with the EU Whistleblower Directive

There are 7 key elements that you can use to evaluate potential vendors or measure your current hotline provider to comply with EU Whistleblower Directive.

Jenna Thomas, Content Marketing Manager, Ethics

June 29, 2022 8 min

Consent & Preferences

OTT & CTV Consent: Providing streamers control over choices

As a result of OTT/CTV’s precise targeting capabilities and addressability, advertisers can tap into significant opportunities through this particular advertising medium.

Ashlea Cartee, OneTrust Product Marketing Manager, Consent & Preferences

June 28, 2022 5 min

ESG & Sustainability

Trust geek glossary: SBTi – Science Based Targets initiative

The Science Based Targets initiative is a coalition that promotes SBTs to facilitate and strengthen business participation in the shift to a net-zero economy.

Julie Yamamoto

June 23, 2022 11 min

Ethics & Compliance

How to support and protect whistleblowers on World Whistleblower Day and beyond

June 23 marks World Whistleblower Day, highlighting whistleblowers' importance in fighting corruption along with ways to support these brave individuals.

June 22, 2022 7 min

Ethics & Compliance

The EU Whistleblower Protection Directive: Retaliation and the Reverse burden of proof

Your company likely has an anti-retaliation policy, but is it enough to meet the new requirements within the EU Whistleblower Protection Directive?

Kelly Maxwell, Content Marketing Specialist, OneTrust

June 16, 2022 6 min

Privacy & Data Governance

5 privacy milestones to prepare for in 2023

Our team of regulatory experts monitors the global privacy landscape to interpret what current trends and milestones mean for maturing privacy programs.

Ryan Edge

June 14, 2022 7 min

Ethics & Compliance

Treat your Code of Conduct like a marketing campaign

Thinking like a marketer will help push users to enact certain behaviors and drive engagement to your Code of Conduct and improve compliance.

June 13, 2022 7 min

Third-Party Risk

10 steps to improving your security questionnaire responses

The information gathered from security questionnaires is critical in the evaluation of business and security practices, and is crucial for compliance.

Daniela Villarreal

June 12, 2022 7 min

ESG & Sustainability

ESG 101: What are ESG topics?

This ESG blog series defines ESG and sustainability: what are ESG topics, why are they important, and how to map the three pillars of a sustainable business.

Julie Yamamoto, ESG Content Marketing Manager

June 09, 2022 10 min

OneTrust organizational update

Due to the downturn in the capital markets, OneTrust reduced its workforce by 25% in June 2022, laying off 950 employees worldwide.

June 09, 2022 4 min

Privacy & Data Governance

Your 2023 privacy strategy checklist​

As you prepare for what’s ahead, OneTrust’s team of experts has rounded up the most significant considerations for your privacy strategy in 2023 and beyond.

Ryan Edge, Director of Strategy | CIPP/E, CIPM

June 08, 2022 8 min

Ethics & Compliance

Gifts, travel, and entertainment (GT&E) policies

Avoid the pitfalls of a manual GT&E policy and disclosure management process, going on the offensive with OneTrust's fully integrated platform.

Kelly Maxwell

June 07, 2022 6 min

Privacy & Data Governance

Differences between Google's Data Safety and Apple's Nutrition Label

Read our blog to learn about the differences between Google Data Safety and Apple Nutrition Labels requirements and why it matters.

June 07, 2022 8 min

Consent & Preferences

4 questions with OneTrust’s Chief Marketing Officer & Tech Trailblazer, Lisa Campbell

To congratulate Lisa on winning 2022 Tech Trailblazer, we sat down to discuss her journey to becoming a "Tech Trailblazer" and why building trust is essential. 

June 07, 2022 4 min

Privacy & Data Governance

Bipartisan US Federal Privacy Bill submitted to the House of Representatives

On June 3, 2022, a draft of a comprehensive federal privacy bill, known as the American Data Privacy and Protection Act (ADPPA) was released.

Alexis Kateifides, Senior Center of Excellence Counsel | FIP, CIPM, CIPP/E

June 05, 2022 9 min

Privacy & Data Governance

Building brand trust through Consent Governance

Learn how to set up a consent governance strategy across your organization to achieve privacy-centric data capture, distribution, and activation.

Ashlea Cartee

June 03, 2022 6 min

Data Discovery & Security

4 steps to set up your data governance program

Let's go through four steps you can take to set up your data governance program effectively by leveraging the right tools and technologies.

Sam Gillespie, Data Governance Offering Manager

May 27, 2022 4 min

ESG & Sustainability

IFRS outlines next steps for consolidating ESG disclosure standards

IFRS releases more details on integration of VRF as part of consolidating Environmental, Social, and Governance (ESG) disclosure standards.

Chris Fenwick, ESG Program Director,

May 26, 2022 5 min

Privacy & Data Governance

How 4 years of GDPR has changed the privacy landscape

The introduction of the GDPR marked a new age in data protection legislation, opening the door to a growing global regulatory landscape.

Alexis Kateifides, Senior Center of Excellence Counsel

May 25, 2022 5 min

TrustWeek 2022 Award winners announced

The TrustWeek 2022 Award Winners have been announced! The OneTrust team came together to recognize our bright and talented customers.

May 25, 2022 5 min

Trust Intelligence

See the New Trust Intelligence Platform in action

Take a closer look at The Trust Intelligence Clouds, dedicated to solving today’s critical business challenges around trust and transparency

May 24, 2022 3 min

Privacy & Data Governance

Announcing the OneTrust Privacy & Data Governance Cloud

OneTrust is excited to unveil the Privacy and Data Governance Cloud, empowering organizations to go beyond compliance and enable trusted data use.

Ryan Edge

May 24, 2022 7 min

ESG & Sustainability

Announcing the OneTrust ESG & Sustainability Cloud

The OneTrust ESG and Sustainability Cloud empowers you to drive change, demonstrate impact, and foster trust through enhanced transparency.

Benedikt Franke

May 24, 2022 5 min

Ethics & Compliance

Announcing the OneTrust Ethics & Compliance Cloud

The OneTrust Ethics and Compliance Cloud enables ethics, compliance, HR, and legal teams to unite people, process, and technology.

Philip Winterburn

May 24, 2022 7 min

GRC & Security Assurance

Announcing the OneTrust GRC and Security Assurance Cloud

OneTrust launches holistic GRC and Third-Party Management solutions for proactive cybersecurity and compliance practices.

Cliff Huntington

May 24, 2022 7 min

Trust Intelligence

Your guide to the Trust Intelligence Platform from OneTrust

The Trust Intelligence Platform delivers visibility across trust domains, action based on AI and regulatory intelligence, and automation to build trust by design.

Blake Brannon, OneTrust Chief Strategy Officer

May 24, 2022 6 min

Privacy & Data Governance

"OneTrust was the only one we could rely on": Customers put trust at the forefront

Food delivery, convenience stores, and healthcare, to live entertainment - learn how customers are making trust the center of their business.

John Ville

May 24, 2022 2 min

Trust Transformation

Trust Transformation starts here

OneTrust launched the world's first Trust Intelligence Platform to empower companies and organizations on their trust transformation.

Blake Brannon

May 24, 2022 2 min

GRC & Security Assurance

New regulations push cyber resiliency on supply chain, FinServ industries

May 2022 cybersecurity regulation updates have brought four key legislations across US and EU regulatory bodies to our attention. Learn more.

Justin Henkel, Head of CISO Center of Excellence, OneTrust

May 23, 2022 5 min

Speak-Up Program Management

How to outsource your whistleblower hotline

A dedicated whistleblower hotline is a vital tool for increasing organizational trust and strengthening your speak-up culture.

Phillip Winterburn, Principal, Product Marketing and Strategy, Ethics

May 20, 2022 5 min

Consent & Preferences

How OneTrust integrates with Google Consent Mode

Now with OneTrust's integration of Google Consent Mode, OneTrust facilitates important implementation steps for easier setup.

Ashlea Cartee, Product Marketing Manager, Consent & Preferences, OneTrust

May 19, 2022 3 min

Third-Party Risk

OneTrust Third-Party Risk Exchange now provides SecurityScorecard Cybersecurity Rating

OneTrust is expanding its partnership with SecurityScorecard to enable Third-Party Risk Exchange customers to view complementary Cybersecurity Ratings.

Scott Solomon

May 17, 2022 4 min

Data Discovery & Security

EU Data Governance Act approved by Council

The EU Data Governance Act aims to increase trust in data sharing, data intermediation services, and encourage data altruism in the EU.

Robb Hiscock, Content Marketing Specialist, CIPM, CIPP/E

May 16, 2022 5 min

OneTrust selected by Samsung Ads for CMP rollout across Samsung TV Plus service in Europe

Samsung Ads, the advertising division of Samsung Electronics, has tapped OneTrust Consent and Preferences across Samsung TV Plus in Europe.

Ashlea Cartee, Consent and Preferences Product Marketing Manager

May 13, 2022 4 min

ESG & Sustainability

3 ways to include employee mental health as part of your ESG program

Find out how to prioritize employee mental health as part of your ESG program to build trust with employees and other stakeholders.

Sophie Hitchman-Smith, Corporate Communications at OneTrust

May 11, 2022 8 min

Privacy & Data Governance

Thai PDPA compliance: the ultimate guide

The ultimate guide to Thai PDPA compliance highlights key requirements for organizations processing personal data in Thailand.

Robb Hiscock, Content Marketing Specialist | CIPP/E, CIPM

May 09, 2022 9 min

ESG & Sustainability

CDP vs SASB vs GRI sustainability reporting standards

Compare three major ESG reporting frameworks and sustainability reporting standards side-by-side: CDP vs. SASB vs. GRI.

Julie Yamamoto, ESG Content Marketing Manager

May 06, 2022 5 min

Ethics Program Management

Engage, delight, and surprise: Switching from a static to interactive code of conduct

Learn how to replace outdated, lengthy, static PDF compliance documents with an Interactive Code of Conduct employees will actually read.

May 05, 2022 11 min

How are you measuring InfoSec KRIs and cybersecurity metrics?

Avoid analysis overload with focused risk and performance indicators

Kaitlyn Archibald

May 04, 2022 7 min

Cookie Consent

Capture first-party data in a cookieless world

With the deprecation of third-party cookies in 2023, marketers and advertisers are examining what's next for their first-party data strategies.

Ashlea Cartee

May 03, 2022 6 min

Privacy Management

Rethinking vendor risk assessments: The shift to risk analytics and control gap analysis

Why and how are businesses rethinking vendor risk assessments, risk analytics and control gap analysis? Learn more in our blog.

Scott Solomon, Product Marketing Lead, OneTrust | CIPM, CIPP/E

May 03, 2022 3 min

Data Discovery & Security

Connecticut Data Privacy Act (CTDPA) signed into law

Connecticut is the 5th state in the US to pass a comprehensive privacy law, the Connecticut Data Privacy Act, or, CTDPA.

Alexis Kateifides

May 02, 2022 4 min

ESG & Sustainability

Trust Geek Glossary: Global Reporting Initiative – GRI reporting

Global Reporting Initiative 101: A practical guide to GRI reporting, what it is, how the GRI Standards work, who uses it, and more.

Julie Yamamoto, ESG Content Marketing Manager, OneTrust

April 28, 2022 8 min

Data Discovery & Security

The top 3 challenges of unstructured data (and how to handle them)

Businesses have a semi-structured data model, made up of two types of data: unstructured data and structured data, exposing them to the risk of data loss.

April 26, 2022 4 min

Privacy & Data Governance

Provisional agreement reached on the EU Digital Services Act

The Digital Services Act (DSA) aims to legislate against the spread of illegal content and protect the fundamental rights of EU citizens.

Robb Hiscock

April 25, 2022 4 min

Speak-Up Program Management

Q&A: DFSA launches new Whistleblowing regime in Dubai

The Dubai Financial Services Authority (DFSA) announced and implemented a new regulatory regime to protect whistleblowers.

Jenna Thomas, Content Marketing Manager, Ethics

April 25, 2022 4 min

Privacy & Data Governance

Global Cross-Border Privacy Rules (CBPR) forum established

With data privacy regulations popping up more frequently than ever, the Global Cross-Border Privacy Rules (CBPR) Forum was just launched.

Alexis Kateifides, Senior Center of Excellence Counsel

April 21, 2022 3 min

GRC & Security Assurance

Streamline COI disclosures with this simple template

Download a simple conflict of interest disclosure template and learn how to effectively manage COIs with OneTrust.

Kirby Kelly, Content Marketing Specialist

April 20, 2022 5 min

Technology Risk & Compliance

8 best practices for answering security questionnaires

Follow OneTrust's eight security questionnaire best practices to prioritize holistic data gathering across your vendor ecosystem.

Brianna Smith, Content Marketing Specialist, OneTrust | GRCP

April 20, 2022 4 min

Privacy Automation

The necessary evolution of privacy program automation

Privacy program automation reduces manual, time-consuming, and often disjointed compliance and governance processes. Read on to learn more.

Ryan Edge, Director of Strategy | CIPP/E, CIPM

April 19, 2022 5 min

ESG & Sustainability

Trust Geek Glossary: Understanding SASB standards

Learn about all things Sustainability Accounting Standards Board: the SASB materiality map, SASB standards, why financial materiality matters, and more.

Julie Yamamoto, ESG Content Marketing Manager, OneTrust

April 18, 2022 9 min

Privacy & Data Governance

The top 4 data governance principles

With the amount of data and metadata aggregated and collected by companies growing by the day, make sure that it's managed effectively. 

Sam Gillespie, Data Governance Offering Manager, OneTrust

April 15, 2022 3 min

ESG & Sustainability

Trust Geek Glossary: What is CDP?

Find out what the CDP (Carbon Disclosure Project) reporting framework is, how it works, who uses it and the benefits of a CDP report.

Julie Yamamoto, ESG Content Marketing Manager, OneTrust

April 13, 2022 7 min

Technology Risk & Compliance

Best practices for building your Security questionnaire answer & Document library

In this blog, we outline five best practices to help organizations build and manage a security questionnaire answer and document library.

Scott Solomon, Product Marketing Lead, OneTrust | CIPM, CIPP/E

April 13, 2022 3 min

ESG & Sustainability

New TCFD ESG disclosure requirements in Canada and the UK

TCFD ESG disclosure requirements: Canada and the U.K. join a growing list of countries adopting TCFD reporting mandates.

Phil Redman, Director, OneTrust ESG

April 12, 2022 6 min

Data Discovery & Security

The ultimate guide to data governance

To manage your data effectively, you need a data governance solution that protects the privacy of the data and adds value to your business.

Sam Gillespie

April 12, 2022 7 min

Ethics & Compliance

Adopt these engaging compliance trainings to reinforce company culture and values

Develop an ethics and compliance training program that meets legal requirements and engages your employees, while covering all the essentials.

Kelly Maxwell, Content Marketing Specialist, OneTrust

April 09, 2022 8 min

Speak-Up Program Management

Effective conflict of interest disclosure management

Are you managing conflict of interest disclosures or COI effectively? Learn how to improve disclosure management and minimize risk with OneTrust.

April 08, 2022 6 min

Cookie Consent

Cookie Consent performance series: server-side rendering

Leveraging a CMP that loads server-side positively impacts website performance, provides a user-friendly experience, and helps you stay compliant.

Ashlea Cartee

April 06, 2022 4 min

Technology Risk & Compliance

How-to guide: Get started responding to security questionnaires

Responding to security questionnaires is time-consuming. Follow our security questionnaire guide to save time on your next questionnaire.

Brianna Smith, Content Marketing Specialist, OneTrust | GRCP

April 06, 2022 4 min

Third-Party Risk

Java framework ‘Spring4Shell’ vulnerability leads to potential exploit

A zero-day Java vulnerability, "Spring4Shell" surfaced and experts believe it could be as impactful as 2021's Log4j. Read to learn more.

Justin Henkel, Head of CISO Center of Excellence

April 04, 2022 3 min

ESG Program Management

Global ESG disclosure standards are edging closer with IFRS proposals

The proposed IFRS sustainability disclosure standards bring us closer to a globally consistent, common set of ESG disclosure standards.

Chris Fenwick

April 04, 2022 5 min

Privacy & Data Governance

Japan’s amended APPI comes into effect

The Amendment Act, including data breach reporting and stricter data transfers, was approved to the current Act on the Protection of Personal Information. 

Andrew Clearwater, OneTrust, Chief Trust Officer

April 01, 2022 3 min

Ethics & Compliance

How a Speak-Up culture can help you mitigate risk

Unpack the strategic value of a speak-up culture, how to improve it, and how it can become your early warning system for challenges.

Kelly Maxwell, Content Marketing Specialist, OneTrust

March 31, 2022 4 min

Privacy & Data Governance

Explainer: Data localization and the benefit to your business

As a growing number of regulators call for tighter data localization requirements, keeping up with data localization laws can be a challenge.

Robb Hiscock, Content Marketing Specialist, CIPP/E, CIPM

March 30, 2022 5 min

Privacy Management

Who owns third-party risk: Breaking down management and compliance silos

Without visibility and oversight across the third-party landscape, risk to your business will become untenable.

March 29, 2022 5 min

Transform personalized experiences with preference management

Preference management empowers consumers to take control of their relationship with a brand, providing users with more power to control their privacy.

Jamie Molnar, Director, Product Marketing

March 28, 2022 6 min

Data Discovery & Security

Agreement in principle made on new EU-US framework for transatlantic data flows

EU and US negotiators have been working towards a solution for EU-US data flows since the invalidation of the EU-US Privacy Shield.

March 25, 2022 3 min

Ethics & Compliance

How to measure speak-up culture

Identify areas for improvement and spaces to celebrate successful culture building through quantitative and qualitative measurements.

Kelly Maxwell, Content Marketing Specialist, OneTrust

March 25, 2022 7 min

Privacy & Data Governance

Utah Consumer Privacy Act (UCPA) signed into law

On March 24, 2022, the UCPA was signed into law by Governor Spencer Cox, becoming the latest addition to comprehensive state privacy laws in the US.

March 24, 2022 5 min

Privacy & Data Governance

ICO International Data Transfer Agreement takes effect

The ICO International Data Transfer Agreement and Addendum to EU SCCs took effect on March 21, 2022. Read the blog to learn more.

March 23, 2022 4 min

ESG & Sustainability

Carbon offsets 101: A guide for going climate neutral

Carbon offsets: Learn more about offsets, how they work, how they can help companies go climate neutral, and how they help protect forests.

Julie Yamamoto

March 21, 2022 15 min

ESG & Sustainability

5 things to know about forthcoming SEC ESG disclosures

The proposed SEC ESG disclosures rule would require public companies to disclose GHG emissions and other climate change risks.

March 21, 2022 4 min

Privacy & Data Governance

Regulatory compliance: Best practices to meet the updated guidelines

In an evolving landscape, regulatory compliance is key. So how do you check the boxes—and go beyond? Learn how on the OneTrust blog.

March 21, 2022

ESG & Sustainability

4 things to look for in your ESG software

The right ESG software tools can help organizations manage environmental, social, and governance expectations more efficiently and intelligently.

March 16, 2022 7 min

Ethics & Compliance

How to build a speak-up culture

Increase the number of reports you receive and build a stronger Speak-Up Culture by implementing these strategies and practical initiatives.

Kelly Maxwell

March 15, 2022 7 min

Privacy & Data Governance

TrustWeek 2022 agenda: Kickstart your trust journey

TrustWeek 2022 brings together thought leaders across Privacy and Data Governance, GRC and Security Assurance, Ethics, and ESG & Sustainability.

March 15, 2022 8 min

Third-Party Due Diligence

What is the German Supply Chain Due Diligence Act?

The German Supply Chain Due Diligence Act is designed to enhance risk management throughout the third-party supply chain.

March 14, 2022 5 min

Ethics & Compliance

Measuring organizational trust: The What, Why, and How

What is organizational trust, why does it matter, and how do you measure it? Learn more about an ethics-driven approach to trust.

March 11, 2022 4 min

Privacy & Data Governance

European Data Protection Board adopts guidelines on codes of conduct

On March 4, 2022, the EDPB announced that it had adopted its final guidelines on codes of conduct for data transfers under the GDPR.

March 09, 2022 6 min

Ethics & Compliance

Trust culture and Organizational behavior

Every day and every interaction becomes another opportunity to showcase your company's commitment to honesty, integrity, and justice.

Kelly Maxwell, Content Marketing Specialist, OneTrust

March 09, 2022 6 min

Third-Party Risk

OneTrust becomes only IT VRM vendor to receive the Gartner Peer Insights™ Customers’ Choice Distinction for three years in a row

OneTrust has been named a Customers' Choice in the 2022 Gartner Peer Insights ‘Voice of the Customer': IT Vendor Risk Management Tools.

March 08, 2022 6 min

GRC & Security Assurance

Strengthening American Cybersecurity Act passes in US

Digital transformation makes cybersecurity critical to protect the organization, maintain resilience, and compete in today's digital business environment.

March 04, 2022 3 min

Third-Party Risk

Answer any security questionnaire with enhanced cell detection for Questionnaire Response Automation

Introducing QRA cell detection – a powerful QRA enhancement that eases the spreadsheet-based questionnaire response process for vendors.

March 02, 2022 2 min

Privacy & Data Governance

Building a GDPR privacy program for small businesses

Small businesses need to develop GDPR privacy programs to protect personal data, build consumer trust, and avoid penalties for non-compliance.

March 01, 2022 9 min

Privacy & Data Governance

EDPB issues opinion on EU-US Data Privacy Framework

President Joe Biden issued an Executive Order on the new EU-US DPF, allowing for the enhanced protection of transferred personal information.

Robb Hiscock, Content Marketing Specialist | CIPP/E, CIPM

February 28, 2022 8 min

ESG & Sustainability

Protecting Today to sustain Tomorrow. Get to know OneTrust ESG.

OneTrust has been named a Leader in The Forrester New WaveTM: Sustainability Management Software, Q1 2022, by Forrester Research, Inc.

February 24, 2022 3 min

Privacy & Data Governance

EU Data Act: New rules proposed on data access

On February 23, 2022, the European Commission proposed a regulation on the use and access of data stemming from the EU (EU Data Act).

February 23, 2022 3 min

ESG & Sustainability

Audit, Measure, and Report on your portfolio companies’ ESG metrics with ESG investor portfolio management

Audit, measure, and report on your portfolio companies' Environmental, Social, and Governance metrics with OneTrust ESG Investor Portfolio Management.

February 22, 2022 3 min

Privacy & Data Governance

EU-US data transfers: Is BYOK the answer?

EU-US data transfers continue to cause organizations problems following the Schrems II decision. Is Bring Your Own Key the solution?

February 21, 2022 5 min

Privacy Management

How a chief trust officer can help Your business build and manage customer trust

A Chief Trust Officer (CTrO) helps the business fulfill its promises to customers and stakeholders on security, privacy, data, ethics, and ESG.

Andrew Clearwater

February 17, 2022 7 min

ESG & Sustainability

ESG reporting and why is it important

Understand why publishing corporate ESG reports is vital to customers, employees, and investors who want to know what your impact is in this area.

February 16, 2022

Privacy & Data Governance

EDPB launches coordinated enforcement action into use of cloud services by public bodies

The EDPB launched its first coordinated enforcement action on the use of cloud services in the public sector across the EU.

February 15, 2022 4 min

Third-Party Risk

Mastering the TPRM lifecycle

Third-party risk management is key to any business. Learn how to master the TPRM lifecycle across your organization in our newest video blog!

February 14, 2022 2 min

Privacy Management

The ultimate guide to LGPD compliance

Brazil's General Personal Data Protection Law (LGPD) entered into force on September 18, 2020. Read the blog to learn more about LGPD compliance.

February 11, 2022 12 min

Consent & Preferences

Deliver dynamic consent experiences using audience logic

Using Audience Logic functionality with consent management, tailors unique digital experiences based on persona, demographics, or channels.

February 11, 2022 4 min

OneTrust opens TrustWeek 2022 registration

Join us for TrustWeek 2022, OneTrust's fifth annual user conference—with live, in-person global events and a robust virtual experience.

February 10, 2022 4 min

Trust Intelligence

Trust & the CISO: The role of trust in the evolution of IT & security

What is CISO trust? As companies face more risk vectors than ever before, establishing trust is critical for the CISO. Read to learn more.

February 09, 2022 7 min

Consent & Preferences

2022 Modernizing marketing strategy series: Data transparency

Data transparency creates trust, and that trust leads to customer loyalty—a winning strategy for building lasting relationships with buyers.

Ashlea Cartee, Product Marketing Manager, OneTrust

February 08, 2022 4 min

Data Discovery & Security

Automating data classification and mapping to embed data context into operations

Accurately classifying data gives your organization a clearer picture of the regulatory requirements attached to it. Get Started with OneTrust Data Discovery.

February 07, 2022 7 min

Get to know: OneTrust’s channel chief Gordy Wyatt

Gordy Wyatt, OneTrust's North America Channel Director, has been named a 2022 CRN Channel Chief. Learn more about OneTrust's partner program.

February 07, 2022 4 min

Third-Party Risk

Buy-In Guide: Making the case for TPRM software

Make the business case for TPRM in your organization and get access to our TPRM buy-in guide to learn how! Read the blog to learn more.

February 04, 2022 4 min

Consent & Preferences

2022 Modernizing marketing strategy series: Oracle & OneTrust

Oracle and OneTrust are teaming up to provide strategic guidance for building a powerful and modern marketing strategy in 2022.

Ashlea Cartee, Product Marketing Manager, OneTrust

February 01, 2022 2 min

Privacy Management

Automated data mapping FAQs

We recently discussed the benefits of an automated data map. In this article, we answer the most popular questions from the audience.

Ryan O'Connor, Solutions Engineer, Privacy

January 31, 2022 4 min

Privacy & Data Governance

Your guide to celebrating Data Privacy Day

January 28 is Data Privacy Day, the international day to empower people and businesses to respect privacy and build trust.

January 28, 2022 6 min

Privacy Automation

4 steps to enhance your DSAR process with redaction

This video walks through the steps your organization can take to enhance your DSAR process with automation, including redaction.

January 26, 2022 1 min

Third-Party Risk

The shift to third-party management (TPM): What is TPM and why does it matter?

Third-Party Trust Management (TPTM) is the next evolution of third-party risk and is key enterprise trust strategy. Learn more in our blog!

January 25, 2022 9 min

Privacy Management

iOS app account deletion FAQs

In this article, we answer your most frequently asked iOS app account deletion requirement questions. Learn more about the impacts.

January 24, 2022 3 min

Privacy & Data Governance

How OneTrust uses OneTrust for data privacy

How can privacy teams keep tabs on operational goals while juggling strategic planning? By effectively utilizing the resources available.

January 24, 2022 7 min

Privacy Automation

Why you should automate data retention policies

By operationalizing data retention, organizations can take another step towards securing consumer trust and demonstrating compliance.

January 20, 2022 5 min

Privacy & Data Governance

Austrian DPA’s Decision in Analytics Services Provider Case

The Austrian DPA issued a decision in the analytics provider case finding that an EU website operator had violated Article 44 of the GDPR.

January 18, 2022 6 min

Consent & Preferences

Zero-party data collection

Learn how to capture and manage zero and first-party data using OneTrust Consent & Preference Management as we approach the end of third-party cookies.

January 18, 2022 4 min

Cookie Consent

Cookie Consent performance series: part 2 – Global CDN & asynchronous loading

Implementing a CMP that uses a balanced global CDN system paired with asynchronous loading is crucial to your business.

January 14, 2022 4 min

Consent & Preferences

OneTrust named a leader in privacy and consent

We're excited to announce that OneTrust has been named a Leader in the KuppingerCole Leadership Compass for Privacy and Consent Management.

January 12, 2022 3 min

Privacy Automation

Top reasons employees submit SARs and how you should prepare

Take a look into some of the top reasons why employees might make an access request and how employers can prepare for when they do.

January 11, 2022 4 min

Cookie Consent

How CMOs are building brand trust through personalized experiences

Learn how to drive personalization and nurture brand trust with data transparency, data enrichment, and ethical data activation.

January 10, 2022 4 min

Consent & Preferences

Year in review: OneTrust’s market-dominating CMP

As 2021 comes to a close, OneTrust highlights the biggest enhancements and milestones of its market-leading consent management platform (CMP).

January 06, 2022 3 min

Preparing for the new Apple account deletion requirement

On October 6, 2021, Apple introduced a new account deletion requirement for App Store submissions starting on January 31, 2022. 

January 03, 2022 6 min

Privacy & Data Governance

OneTrust announces series C funding at a $5.3 billion valuation

Today we are proud to announce our $300 million Series C funding round at a $5.1 billion valuation! Read all about it.

December 20, 2021 3 min

Third-Party Risk

The future of TPRM: Third party risk management predictions for 2022

In 2021, TPRM and cybersecurity remained at the forefront of business strategy, so what's next? Learn about 2022 TPRM predictions in our blog!

December 19, 2021 5 min

Third-Party Risk

Build the business case: The importance of business resilience and TPRM

Learn about the impact of third-party service outages and how to stand up a TPRM-informed business resilience strategy in our latest blog.

December 16, 2021 4 min

Consent & Preferences

OneTrust supports CI/CD pipeline with mobile app scanning API

The Mobile App Scanning API helps support CI/CD pipeline for developers - a scalable API for uploading, scanning and re-scanning apps.

December 15, 2021 3 min

Third-Party Risk

Working with vendors to address the Apache Log4j 2 library vulnerability

A new, critical vulnerability that impacts a popular open-source Java logging library, Apache Log4j 2 exists. Read more in our blog.

December 14, 2021 5 min

Privacy & Data Governance

The EU Council clears EU Taxonomy rules

The European Union passed the first part of its EU taxonomy rulebook on climate-friendly investments, applying on January 1, 2022.

December 09, 2021 2 min

Privacy & Data Governance

NIS2: An EU-Wide cybersecurity strengthening and resilience solution

On December 3, the EU announced that it had agreed its general approach to the text of the NIS 2 Directive. Read to learn more!

December 09, 2021 3 min

ESG & Sustainability

OneTrust acquires Planetly, the climate action and carbon management company

OneTrust has acquired Planetly, the Climate Action, and Carbon Management company, to help businesses transform to net-zero emissions.

Phil Redman

December 08, 2021 3 min

Cookie Consent

Accelerate your cookie banner implementation with OneTrust’s CMP Wizard

Through the OneTrust CMP Wizard, businesses can use a guided step-by-step interface to scan their website for cookies and trackers.

December 06, 2021 3 min

GRC & Security Assurance

Privacy and IT risk: How secure are your assets securing personal data?

Protecting personal data is a multi-functional operation. Learn how prioritizing privacy and IT Risk for assets can help your organization on its journey to trust.

December 02, 2021 6 min

Privacy & Data Governance

Automate policy management to align Privacy & Data Governance initiatives

By ensuring all organizational data is unified under one system, teams can unilaterally manage data policies with automation.

December 02, 2021 6 min

Privacy & Data Governance

Why Is everyone talking about trust? And why the CISO should care

The CISO plays an important role in establishing trust and keeping workflows across the enterprise secure. Learn more in our blog!

November 29, 2021 4 min

Privacy & Data Governance

German TTDSG enters into force on December 1, are you ready?

On December 1, 2021, the TTDSG will enter into force implementing new cookie consent requirements in accordance with the ePrivacy Directive.

November 29, 2021 6 min

Privacy & Data Governance

UAE enacts new federal Personal data protection law

A new comprehensive personal data protection law was enacted in the UAE on November 29, 2021 as part of a broad federal reform package.

November 29, 2021 4 min

Privacy & Data Governance

Relevant European supervisory authorities notified and have 4 weeks to provide feedback to the draft decision

On November, the Belgian DPA issued a press release on its draft decision in the case against IAB Europe relating to its Transparency & Consent Framework.

November 25, 2021 3 min

Privacy & Data Governance

ICO issues opinion on data protection expectations for AdTech proposals

The UK Information Commissioner's Office (ICO) released its opinion on Data Protection and Privacy Expectations for Online Advertising Proposals.

November 25, 2021 5 min

Cookie Consent

Luxembourg: CNPD publishes new cookies guidelines

The CNPD clarifies in the new guidelines some important distinctions about cookies regarding their types, purposes, and uses.

November 24, 2021 3 min

Privacy & Data Governance

Report on India’s personal data protection bill adopted

The JPC adopted a draft report on India's Personal Data Protection Bill, 2019 which will now be presented during Parliament's winter session.

November 23, 2021 3 min

Technology Risk & Compliance

Mature your privacy program with DSAR & Incident management automation

With increasing privacy and security regulations, maturing privacy teams are using automation to scale DSAR and incident management efforts.

November 23, 2021 10 min

Privacy & Data Governance

EDPB clarifies scope of data transfers

On November 19, 2021, the EDPB released its draft guidelines on the interplay between Article 3 and Chapter V of the GDPR for data transfers.

November 19, 2021 6 min

Cookie Consent

Expanding beyond a cookie banner to preference management 

Expanding beyond a cookie banner to preference management  allows you to turn privacy requirements into a real marketing advantage.

November 18, 2021 5 min

GRC & Security Assurance

Cybersecurity Maturity Model 2.0: New strategic implications from GRC to VRM

The US Department of Defense updated CMMC strive to simplify and strengthen the security of the defense industrial base. Read to learn more.

November 12, 2021 4 min

Cookie Consent

Cookie Consent performance series: Part 1 – SEO & availability

Our Cookie Consent Performance series dives into key ways you can maintain website authority, user experience, and compliance. Here's part 1.

November 11, 2021 4 min

Data Discovery & Security

How data discovery enhances & automates your data mapping

Organizations need to mature and scale their data mapping programs with technology that unifies and automates data discovery.

November 09, 2021 6 min

Privacy & Data Governance

Firefox joins other browsers implementing Global Privacy Control

Mozilla Firefox is the latest browser implementing Global Privacy Control (GPC), taking initiative to help users control their privacy.

November 08, 2021 4 min

ESG & Sustainability

Republican Energy & Commerce Committee introduce draft US Federal Privacy Bill

The Republican Energy and Commerce Committee introduced a comprehensive draft privacy bill establishing standards for data privacy and security in the US.

November 04, 2021 4 min

ESG Program Management

IFRS announce International Sustainability Standards Board (ISSB)

The IFRS announced the formation of the ISSB and Prototype Climate Disclosure Standards during the COP26 summit in Glasgow.

November 03, 2021 4 min

ESG & Sustainability

ESG and sustainability software platforms that enterprises can leverage

All eyes are on ESG right now but how can enterprises leverage ESG and sustainability software platforms to meet and track their goals?

October 26, 2021 5 min

Privacy Automation

OneTrust adds native Microsoft integration into privacy management solution

OneTrust, the most widely used privacy management platform, has added Microsoft's Privacy Management for Microsoft 365 integration.

October 22, 2021 3 min

ESG & Sustainability

The CSO (chief sustainability officer) & vendor risk management: Top challenges & biggest opportunities

As brand sustainability expectations evolve, CSOs must consider vendor risk management (VRM). Learn how to combine ESG and VRM in our blog.

October 21, 2021 5 min

ESG Program Management

ESG management: The enterprise ESG cycle

Improve your organization's ESG efforts by leveraging the Enterprise ESG Cycle in your ESG management program. Learn how in our blog.

October 19, 2021 3 min

Privacy & Data Governance

OneTrust partners with Snowflake to simplify data classification & enforce policy

OneTrust and Snowflake have partnered to enable developers, data engineers, and data scientists to improve data discovery and governance across platforms.

October 07, 2021 3 min

Third-Party Risk

OneTrust Vendorpedia offers same-day support for the 2022 Shared Assessments SIG

Learn how to manage risk in a time-friendly, cost-effective way with low effort for your vendors with our SIG 2022 shared assessments support.

September 28, 2021 3 min

Privacy & Data Governance

The ultimate guide to CCPA compliance

The Ultimate Guide to CCPA Compliance outlines the key areas of the law that your organization should consider. Read the blog to learn more.

September 27, 2021 10 min

Ethics & Compliance

Improve the reporting experience with preferred language reporting

Convercent by OneTrust announced enhanced global Call Center operations, aiming to have calls handled in a reporter's preferred language.

September 27, 2021 3 min

ESG & Sustainability

Diversity, Equity & Inclusion: Reflecting on OneTrust’s DE&I council

Learn how OneTrust has built a team of leaders dedicated to supporting its employees and community through the Diversity, Equity & Inclusion Council.

September 24, 2021 7 min

Privacy & Data Governance

Quebec’s Bill 64 Adopted

On September 21, Bill 64 obtained a majority vote in the National Assembly of Quebec and will become law. Read the blog to learn more.

September 22, 2021 4 min

GRC & Security Assurance

OneTrust named a leader in GRC Platform Independent Research report

OneTrust has been named a leader in the Forrester Wave: Governance, Risk, And Compliance Platforms Q3 2021.

September 22, 2021 4 min

GRC & Security Assurance

OneTrust acquires Tugboat Logic

OneTrust is acquiring Tugboat Logic security assurance and certification automation platform for ISO 27001 and SOC 2.

September 21, 2021 4 min

Consent & Preferences

OneTrust’s Consent and Preference Management Platform captures millions of consent transactions

OneTrust, the most widely used consent and preference management platform captures over 3 billion consent transactions a week. 

September 20, 2021 3 min

Privacy & Data Governance

When Is DSAR redaction relevant? Your questions answered

In this article, we answer six of our most frequently asked questions centered around one common theme: When is DSAR redaction necessary?

September 20, 2021 5 min

GRC & Security Assurance

OneTrust recognized in 2021 Gartner® Magic Quadrant™ for IT Risk Management

OneTrust was recognized in the 2021 Gartner Magic Quadrant for IT Risk Management for its GRC product. Access the report in our blog.

September 16, 2021 4 min

Ethics & Compliance

Importance of policy and procedure

We all know policies and procedures are important, but they often end up ineffective. Learn how to maximize policies on the OneTrust blog.

September 16, 2021 6 min

Privacy & Data Governance

OneTrust integrates with Box to support customers automate Privacy Compliance

 Today, OneTrust announced an integration with Box to better support customers wanting to automate privacy, security, and compliance. 

September 15, 2021 3 min

Privacy & Data Governance

The new SCC deadline Is approaching: Are you prepared?

The deadline for signing old Standard Contractual Clauses (SCCs) into new contractual agreements is approaching. Are you prepared?

September 15, 2021 5 min

Ethics Program Management

Top 5 reasons your organization needs awareness training

Many of the world's privacy laws contain training obligations but there are several reasons that you need awareness training. Read the blog to learn more.

September 14, 2021 5 min

Consent & Preferences

How to build trust and value privacy with a Consent Management Platform

You can't run a modern privacy program without a consent management platform. Learn how to bring privacy and personalization together.

September 13, 2021 12 min

Third-Party Risk

OneTrust named a Leader in the 2021 Gartner® Magic Quadrant for IT Vendor Risk Management Tools

For the third consecutive year, OneTrust is a leader in the 2021 Gartner Magic QuadrantTM for IT Vendor Risk Management Tools.

September 02, 2021 5 min

Consent & Preferences

Why you need a CMP alongside Apple ATT

Apple requires apps to use an ATT prompt to request permission from end users before tracking them. Learn how implementing a CMP can help.

August 26, 2021 4 min

Consent & Preferences

Prove you value privacy with consent and preference management

Prioritize privacy by implementing consent and preference management across marketing and advertising activities. Learn more in our blog.

August 24, 2021 4 min

GRC & Security Assurance

The ultimate security questionnaire guide

Implementing a consistent security questionnaire answering process will save your organization time and money. Read our guide to learn more.

Brianna Smith, Content Marketing Specialist, OneTrust | GRCP

August 17, 2021 15 min

Privacy & Data Governance

The CCPA metrics reporting requirement: What you need to know

As of July 1, 2021, the CCPA metrics reporting obligation took effect for certain organizations. Here's what you need to know.

August 11, 2021 3 min

Technology Risk & Compliance

ITRM 101: Understanding the impact of IT risk on your organization

Read our IT risk management (ITRM) guide to understand IT risk management's impact on your organization and why it's more critical than ever.

August 10, 2021 14 min

Consent & Preferences

Telemarketing & Compliance: What marketers need to know

Let's look at how this crucial marketing channel can be effectively implemented while remaining compliant with telemarketing legislation.

August 06, 2021 4 min

Consent & Preferences

Test for success: A/B testing essential to improve ROI

When you A/B test your cookie banners, your marketing goals and compliance with data regulations don't have to be mutually exclusive.

August 03, 2021 4 min

Privacy & Data Governance

OneTrust Vendorpedia Third-Party Risk Exchange now provides Cyber Risk scores on thousands of vendors

OneTrust partners with ISS Corporate Solutions (ICS) to enable new cyber risk scoring capabilities for Third-Party Risk Exchange customers.

August 02, 2021 4 min

Data Discovery & Security

OneTrust recognized in The Forrester Wave™: Data Governance solutions, Q3 2021

Today we are excited to announce that OneTrust DataGovernance debuted in The Forrester Wave: Data Governance Solutions, Q3 2021 report.

July 27, 2021 3 min

Privacy Management

Privacy laws & Employee DSARs

Organizations faced with employee data subject access requests (DSARs) need a tool that uses automation to properly redact data.

July 23, 2021 6 min

Privacy Automation

How to automate your DSAR process with discovery & redaction

As the volume of DSAR requests increases, organizations are turning to automation to help manage the redaction process.

July 21, 2021 3 min

Privacy Management

The APEC CBPR Certification: What is it?

The APEC Cross-Border Privacy Rules System (CBPR) is a voluntary, accountability-based system created by the Asia-Pacific Economic Cooperation.

July 20, 2021 4 min

GRC & Security Assurance

Reduce your risk: Supply chain attacks and the rise of ransomware

As the new trend in ransomware attacks rises, companies need to be aware of the impact on supply chain vulnerability. Learn more in our blog.

July 16, 2021 4 min

Ethics & Compliance

Germany passes new corporate due diligence act

Germany's parliament has passed the German Corporate Due Diligence Act, requiring due diligence in combating human rights violations.

July 14, 2021 3 min

Privacy & Data Governance

The 7 principles of privacy by design

The 7 Principles of Privacy by Design is a holistic approach to privacy and seamlessly integrates privacy into products, services, and system designs by default.

July 13, 2021 6 min

Privacy & Data Governance

IAB canada finalizes TCF policies

The Interactive Advertising Bureau (IAB) of Canada recently finalized its version of Transparency Consent Framework (TCF) Policies.

July 09, 2021 1 min

Third-party cookies are going away: How marketers can prepare

In the massive gap left in the wake of third-party cookies going away, organizations must adjust their consent strategies.

July 08, 2021 6 min

GRC & Security Assurance

How AutoZone goes the extra mile with OneTrust Vendorpedia

AutoZone Goes the Extra Mile and drives TPRM operations with OneTrust Third-Party Risk Management. Learn more from Auto Zone TPRM, Ryan Walker.

July 07, 2021 3 min

Privacy & Data Governance

How good IT Asset and Risk Management can protect you from ransomware

Executive leadership must prioritize implementing a healthy IT asset and Risk management program in the wake of increased ransomware attacks.

July 02, 2021 5 min

Data Discovery & Security

The 4 pillars of data intelligence

Use the 4 pillars of data intelligence to better understand the data you have, how it's used, and the requirements that apply to it.

OneTrust

July 01, 2021 5 min

Privacy Management

The CPO & Vendor risk management: top challenges & biggest opportunities

As the privacy landscape evolves, CPOs must consider vendor risk management as a key area of any healthy privacy management program.

June 30, 2021 5 min

Privacy & Data Governance

EDPB final recommendations: The 6 step roadmap (Part 1 of 3)

Take a deeper look at the EDPB six-step roadmap to help identify the appropriate supplementary measures for international data transfers.

June 29, 2021 5 min

Privacy & Data Governance

European commission adopts two UK adequacy decisions

Learn about how the European Commission adopted two UK adequacy decisions in relation to the GDPR and the Law Enforcement Directive.

June 28, 2021 4 min

Cookie Consent

Google delays deprecation of third-party cookies until 2023

On June 24, 2021, Google announced it is delaying plans to phase out third-party cookies in its Chrome browser until 2023.

June 24, 2021 4 min

Technology Risk & Compliance

How your organization can use an incident management playbook

An incident management playbook is an actionable guide for how to report events, define responsibilities, and manage response procedures.

June 22, 2021 5 min

Privacy & Data Governance

Operationalize EDPB final Schrems II guidance with OneTrust

You can operationalize the EDPB's guidance today with OneTrust's expanded Schrems II Solutions which provide both EU exporters and importers.

June 21, 2021 5 min

ESG Program Management

The ultimate guide to ESG management and factor

What is ESG Management? It is crucial to execute a strong ESG program throughout your organization to remain competitive. Read more here.

June 18, 2021 12 min

Privacy & Data Governance

Ecuador’s new data protection law

Ecuador's new data protection regulation has become law, and establishes a national data protection authority, and regulates cross-border data transfers.

June 17, 2021 3 min

Ethics & Compliance

Convercent by OneTrust announces third-party risk management solution for Ethics & Compliance

Convercent by OneTrust Third-Party Risk Management for Ethics and Compliance professionals provides a way to identify third-party risk.

June 17, 2021 2 min

ESG & Sustainability

ESG Risks | Challenges & Solutions

Learn some challenges of creating an ESG strategy nationally and globally for your organization while addressing risk, management, and compliance.

June 16, 2021 6 min

Privacy & Data Governance

China data security law passed

A new China data security law takes effect on September 1, 2021 protecting data in the interest of the country's national security. Learn more.

June 14, 2021 4 min

Third-Party Risk

What is vendor risk management?

Vendor risk management (VRM) is a form of risk management that focuses on identifying and reducing risks relating to vendors.

June 09, 2021 14 min

Privacy & Data Governance

Nevada privacy bill signed by Governor Sisolak

On June 2, 2021, Nevada Governor Stephen F. Sisolak signed the Nevada Privacy bill ((SB) 260) which focuses on Internet privacy.

June 07, 2021 3 min

ESG & Sustainability

ESG factors and infographic

OneTrust can help you track and measure your ESG goals, as social, environmental, and governance strategies become crucial in the corporate environment.

June 04, 2021 3 min

Privacy & Data Governance

European commission adopts new Standard Contractual Clauses (SCCs)

On June 4, 2021, the European Commission adopted two sets of modernized standard contractual clauses (SCCs). Read the blog to find out more.

June 04, 2021 4 min

Privacy Management

Thai PDPA data subject rights: What you should know

Enforcement of the Thai PDPA has been postponed until 2022 but organizations should still prepare for an influx data subject rights requests.

June 03, 2021 5 min

Third-Party Risk

What is third-party risk management?

Third-party risk management (TPRM) is a form of risk management that focuses on identifying and reducing risks relating to the use of third parties.

June 01, 2021 6 min

Cookie Consent

noyb Cookie Consent best practices guide

OneTrust has provided customers with a resource guide and relevant regulatory authority research following the May 31 noyb cookie notices.

June 01, 2021 2 min

Third-Party Risk

OneTrust acquires Shared Assessments to grow the SIG and global third-party risk standardization

Shared Assessments will remain vendor neutral post-acquistion to grow the SIG third-party risk standard globally.

May 31, 2021 4 min

Privacy & Data Governance

OneTrust celebrates five years of trust

Five years ago, OneTrust was founded. Today, we're celebrating five years of trust with our 10,000 customers, 2,000 employees, and community.

May 26, 2021 5 min

Privacy & Data Governance

The GDPR data subject rights - global privacy laws

The GDPR is one of the most robust global privacy laws in effect today. What rights does it invoke on it's data subjects?

May 24, 2021 3 min

Privacy Management

The ultimate guide to privacy management

A foundational standard for privacy management is proving through records that you have a legal reason for collecting and processing personal data. 

May 21, 2021 15 min

Privacy & Data Governance

The EU Cloud Code of Conduct approved by Belgian DPA

On May 20, 2021, the Belgian DPA announced that it had approved the EU Cloud Code of Conduct. Read the blog to find out more.

May 20, 2021 3 min

Privacy & Data Governance

France announces strategy for cloud technology

On May 17, 2021, the French Government announced its national strategy for cloud technology. Read the blog to find out more.

May 18, 2021 3 min

Privacy Management

Understanding the 7 principles of the GDPR

The 7 key GDPR principles at the heart of the law should inform every step of a modern privacy management program. 

May 17, 2021 5 min

Data Discovery & Security

What’s hidden in your files? How to better govern your unstructured data

What's hidden in your files? Learn more about how unstructured data discovery can help you uncover and address hidden compliance risks.

May 05, 2021 6 min

Privacy & Data Governance

Apple iOS 14.5: how to prepare with OneTrust

Apple announced new iOS 14.5 requirements will now go into effect on April 26, 2021 with the release of Apple iOS 14.5.

April 23, 2021 4 min

Consent & Preferences

OneTrust launches Consent Banner testing feature

OneTrust launched a new consent banner testing feature that allows customers to test their consent management platform before publishing.

April 21, 2021 4 min

Privacy & Data Governance

Guide to the General Data Protection Regulation (GDPR)

GDPR Compliance means an organization that falls within the scope of the GDPR meets the requirements for properly handling personal data.

April 16, 2021 19 min

Ethics & Compliance

OneTrust Acquires Ethics and Compliance Leader Convercent

OneTrust acquires ethics and compliance software leader Convercent to help continue to build our Trust Intelligence platform.

April 14, 2021 4 min

Data Discovery & Security

Webinar recap: How Data Discovery enhances your DSAR workflow

Be prepared to respond to Data Subject Access Requests and utilize automated data discovery with OneTrust Data Discovery.

April 01, 2021 5 min

ESG & Sustainability

ESG best practices and corporate benefits

Learn how implementing ESG best practices may benefit an organization's brand, revenue, company valuation, and market perception, as well as reduce risk.

March 31, 2021 6 min

Privacy & Data Governance

Your top 10 Data Redaction questions answered

We took your top questions and created an FAQ series to dive into our data redaction capabilities and what they mean for you.

March 30, 2021 7 min

Privacy & Data Governance

Preparing for privacy compliance in Panama

Panama's Law No. 81 on Personal Data Protection takes effect March 29, 2021, bringing a new set of compliance challenges for organizations.

March 29, 2021 3 min

Privacy & Data Governance

Get ready for POPIA with OneTrust

Enforcement for South Africa's Protection of Personal Information Act (POPIA) will begin on July 1, 2021 and OneTrust can help you get ready.

March 22, 2021 3 min

Privacy & Data Governance

How to prepare for Apple iOS 14.5 privacy requirements

Apple iOS 14.5 Privacy Requirements and iPadOS 14.5 are scheduled for a spring 2021 release. The new release includes privacy features.

March 19, 2021 5 min

ESG & Sustainability

OneTrust's ESG solution is here

OneTrust's ESG solution provides organizations with environmental, social, and governance technology built in to the OneTrust platform.

March 15, 2021 3 min

Privacy Management

Privacy program best practices 

Smart businesses know having a privacy program in place is just good business. Here are the best privacy program practices.

March 12, 2021 7 min

Data Discovery & Security

OneTrust DataGovernance announces Data Catalog

OneTrust Data Catalog is a solution for data officers, data stewards, and other stakeholders to find and utilize the data that matters most.

March 11, 2021 4 min

Cookie Consent

OneTrust CNIL cookie guidelines toolkit

On April 1st, the CNIL, will begin to enforce its latest cookie recommendations. Download our CNIL Cookie Consent Guidelines Checklist today!

March 08, 2021 3 min

Consent & Preferences

Maximize Opt-Ins with Consent Rate Optimization

OneTrust launches Consent Rate Optimization, to help organizations personalize user experience and maximize opt-ins while respecting privacy.

March 04, 2021 3 min

GRC & Security Assurance

HIPAA compliance: Building a bridge to a robust privacy program

If your organization manages PII, it's crucial to embed HIPAA compliance into your privacy program. Here's how to get started. 

March 02, 2021 10 min

Privacy & Data Governance

Virginia’s Consumer Data Protection Act signed into law

Virginia became the next state to officially pass a comprehensive privacy law. The CDPA sets out an increased protection for consumer data.

March 02, 2021 3 min

Privacy & Data Governance

OneTrust acquires Redacted.ai for data redaction

OneTrust acquired Redacted.ai data redaction technology and introduces OneTrust Data Redaction technology to solve a broad range of privacy use cases.

February 28, 2021 3 min