Summary
This guide outlines Notified's comprehensive Privacy and Data Protection compliance program, effective August 2025. It details Notified's processes for demonstrating compliance, including privacy by design, privacy impact assessments, data mapping, privacy audits, and updating customer contracts. The guide explains the roles of Data Processors and Data Controllers under privacy law, specifically referencing GDPR, CCPA, and CPRA. It describes the procedures for processing personal data, including maintaining records, ensuring data accuracy, and implementing security measures. Additionally, it outlines data breach notification procedures, including a breach response plan and metrics tracking. The guide also includes information on Notified's privacy statement, rights to be forgotten, and the processes for audits and assessments. Furthermore, it discusses the integration of privacy by design into systems and product development, subcontracting practices, and the implementation of security measures to protect personal data. Overall, the guide serves as a resource for understanding Notified's commitment to privacy compliance.
