Last month I looked at some of the basics for data privacy on projects. Let’s go into that in a bit more depth this month, by looking at some of the project tasks you can schedule to help manage data on your project within the regulations of your country, whatever they are.
The data mapping exercise should help you understand where, how, and why data is being collected throughout the project lifecycle and beyond.
A DPA is a document that outlines how data will be handled, stored, and protected. There is probably a template within your organisation already.
Alternatively, the task is to check that DPAs are already in place, if the vendor is one that you use regularly. I like the kind of tasks that can easily be checked off! They help the team feel they are making progress and ensure that you are putting compliance at the forefront of your processes.
Again, if your company already has a relationship with the third-party, the task here is to check that it was done at some point and does not need to be done again.
Generally, the IT team would have to take responsibility for doing these things or checking that they are already in place from a third party. Talk to them about the kinds of tasks that need to go on the schedule so they have enough time to put security measures live before the project launches.
Again, talk to your technical teams about what this might look like for your projects and put the time in for this work so it doesn’t get squeezed in at the last minute or forgotten about.
All of these scheduleable (is that a word?) tasks will help you address any risks or issues relating to non-compliance and show that you are actively prioritising data privacy. Next time I’m going to look at training teams on data privacy best practices. Meanwhile, why not share your experiences of data on your projects in the comments below? Thanks!
- Data mapping
The data mapping exercise should help you understand where, how, and why data is being collected throughout the project lifecycle and beyond.
- Data Processing Agreements (DPAs)
A DPA is a document that outlines how data will be handled, stored, and protected. There is probably a template within your organisation already.
Alternatively, the task is to check that DPAs are already in place, if the vendor is one that you use regularly. I like the kind of tasks that can easily be checked off! They help the team feel they are making progress and ensure that you are putting compliance at the forefront of your processes.
- Due diligence
Again, if your company already has a relationship with the third-party, the task here is to check that it was done at some point and does not need to be done again.
- Data security and risk mitigation
Generally, the IT team would have to take responsibility for doing these things or checking that they are already in place from a third party. Talk to them about the kinds of tasks that need to go on the schedule so they have enough time to put security measures live before the project launches.
- Testing
Again, talk to your technical teams about what this might look like for your projects and put the time in for this work so it doesn’t get squeezed in at the last minute or forgotten about.
All of these scheduleable (is that a word?) tasks will help you address any risks or issues relating to non-compliance and show that you are actively prioritising data privacy. Next time I’m going to look at training teams on data privacy best practices. Meanwhile, why not share your experiences of data on your projects in the comments below? Thanks!
Posted on: June 03, 2025 09:00 AM |
Permalink
Community Champion
