The Individual Rights Manager works with TrustArc’s existing data platform to help companies sift through and act on consumers’ data inquiries.
The IRM tool consists of a customizable form for user requests and templates that analyze the request and provide next steps. Companies that want further guidance can add consulting services.
Customers access the form through a link or button on the business’s website.
“We’ve created very specialized templates,” Dave Deasy, TrustArc’s senior vice president of marketing, said of the system that sifts through the user-submitted forms. “We’ve created one that ties to each of the different individual rights. It provides the company a quick way to be able to determine how to respond. We call them mini-assessments. They essentially take some very complex language in the GDPR and then break [it] down into very simple steps that the company can then go through.”
Deasy said it’s hard for companies to plan for inquiries because “nobody has any idea how many [requests from data subjects] they’ll get. If — just based on the type of industry and the type of clientele they have and maybe the size of the company — you’re going to get 10 or 20 of these a year, you’re not really that concerned or interested in trying to integrate with some other system. It’s just not worth the effort versus a large consumer-facing company that maybe has social media-type products where you could be dealing with thousands of inquiries. Then you’ve got a much, much higher desire to try to figure out how to potentially integrate with something else.”