One increasingly important aspect of the identity lifecycle is the use of personal data. The organization's privacy policy declares how users' private and personal information is processed. With consent management, users can confirm which personal information they allow the data processor to access, and use based on pre established conditions. Stronger, more uniform rules on data protection mean that citizens have more control over their personal data.
The EU’s General Data Protection Regulation (GDPR) is significant in this context. It replaced Data Protection Directive 95/46/EC and is designed to harmonize European data privacy laws. This regulation applies to parties anywhere in the world who do business in the EU or deal with the personal data of an EU resident when offering goods or services. It also applies to monitoring the behavior of individuals within the EU. Businesses worldwide are adopting GDPR standards to benefit from having just one set of EU operating rules.
To manage Data Privacy, SAP provides the following products:
SAP Privacy Governance
SAP Privacy Governance is a Software-as-a-service solution that supports enterprises across all industries in complying with data protection regulations and ensuring that personal data is kept secure and private. Important regulations are, for example:
- General Data Protection Regulation (GDPR), European Union
- California Consumer Privacy Act (CCPA), United States
- General Data Protection Law (LGPD), Brazil
It provides tools and processes to support compliance with privacy laws and regulations and helps ensure that personal data is managed securely and transparently. SAP Privacy Governance includes data subject rights management, data privacy impact assessment, consent management, privacy policy management, and data retention and deletion processes. It helps organizations build trust with their customers and stakeholders by demonstrating a commitment to responsible data-handling practices.
Features and functionalities:
- Manage policies by creating, disseminating, and acknowledging data protection and privacy (DPP) policies
- Survey and track to gather and report on records of processing activities (RoPA)
- Access business impact by performing data privacy (DPIA) and cybersecurity business impact analysis
- Manage risks and controls to identify audit-related risks and mitigate controls
- Monitor and report on status and details via a unified cockpit
For more information, see SAP Privacy Governance.
SAP Information Steward
This solution provides data quality and metadata management capabilities to help organizations ensure that their data is accurate, complete, and compliant with privacy regulations.
Key features of SAP Information Steward include data profiling, which allows users to analyze the quality and structure of their data, and data cleansing, which enables users to standardize, validate, and enrich their data. It also provides capabilities for metadata management, allowing organizations to define and maintain a comprehensive understanding of their data assets.
SAP Information Steward also includes data governance features, allowing organizations to define data quality rules, monitor data quality metrics, and enforce data quality standards. It also enables collaboration and workflow management for data stewardship activities so organizations can manage data quality initiatives in a structured and efficient manner.
Overall, SAP Information Steward helps organizations achieve higher data quality and governance, leading to more accurate and reliable decision-making, improved operational efficiency, and increased compliance with data regulations.
For more information, see SAP Information Steward.
SAP Data Custodian
SAP Data Custodian is a cloud Software-as-a-service that helps organizations manage, govern, and secure their data across various cloud platforms and On-Premise data sources. It provides greater visibility and control over data access, usage, and movement, helping organizations comply with data protection regulations and policies.
Key features include:
- Key Management Service provides complete key lifecycle management, including managing all your encryption keys within a secure, SAP-Provided tenant and protecting the organization's SAP data from unauthorized access or misuse.
- Transparency and Control Service gives an organization enhanced monitoring and control capabilities for cloud data and resources to enforce data security and protection on processing requirements on a global scale.
For more information, see SAP Data Custodian.
The SAP Trust Center has further information about security, data protection, and compliance.
Lesson Summary
You can now describe all the three solutions SAP provides for managing data privacy.