Privacy should not be considered as a normal business service such as client admission and discharge that can be delivered with defined business processes. Privacy should be integral part of the business, which must be integrated into the business culture and service delivery.
While most of the privacy activities are embedded into the business processes, the management of the privacy demands separate processes. Like information security management and quality management, privacy management program is required to ensure privacy issues are managed properly and consistently to support the organization’s privacy objectives.
Privacy program management includes the following key processes:
-Planning
-Project management
-Monitoring and reporting
-Audit and review