Iron Mountain Policy Centre Enterprise Edition solution brief

Business Challenge:

You’re responsible for implementing controls and policies to ensure your organization is complying with laws and regulations. This includes interpreting laws and identifying compliance requirements for managing information, such as retention rules and privacy obligations, so you can properly protect and legally dispose of information when it’s no longer required. That’s challenging when the regulatory environment is constantly changing due to existing and new regulations, such as the evolving global privacy regimes.

How This Affects You:

• You lack guidance and automated tools to enable compliance with changing regulations.
• You’re incurring unnecessary cost and risk by keeping information for longer than is required for legal, regulatory or business purposes.
• You aren’t easily able to communicate policy changes to information owners and show compliance to regulators.

Industry Fact

The global average total cost of a data breach is $4.35 million.

Source: Ponemon Institute, “Cost of a Data Breach Study”

What If You Could:

• Receive expert guidance and tools to comply with the evolving global retention rules and privacy regimes along with other regulations that govern you?
• Receive continuously updated retention and privacy requirements so you can keep your policy management connected and dispose of information when it’s no longer required?
• Provide online visibility into the latest version of your retention schedule, privacy obligations and critical information about your business processes that contain personal data?

Advisory Services

Our Advisory Services team with deep information governance (IG) expertise will guide you through the process of creating or revamping your information management policies for records retention and data privacy as part of the IG Program Development service. You’ll receive expert guidance on how to optimize your privacy policy and records classification scheme based on best practices, the level of granularity you need, and your risk appetite. You’ll work together to define your subscription to legal research on updates to retention and privacy requirements based on where you operate and the types of law required to support your retention and privacy policies. You can also receive support in mapping your business processes that contain personal data.

Policy Center

You'll be able to keep your records retention and data privacy policy management connected, current and compliant through the cloud-based Policy Center portal. As laws change, you can count on high quality research from our international network of law firms to know how changes impact your organization so you can update your policies accordingly. Available as a subscription service, you'll receive a feed of fully cited and summarized legal citations with a simple explanation of the requirements to empower your decisions on retention rules and privacy obligations that make sense for your organization. With filters you can easily view which record classes and types in your retention schedule are affected by privacy law.

To show compliance, you'll have tools to document critical information about your business processes that contain personal data, enabling compliance with the GDPR Article 30 requirements. You'll be able to create visual maps to centrally see where personal data lives, who owns it, what process it's a part of and what are your retention rules and privacy obligations for it. In your maps you can show the movement of personal data within and outside of your organization so you can quickly identify where personal information is located to help your company respond to time-sensitive issues, such as data breaches, subject access requests, data erasure requests, audits and litigation.

Employees in your organization can easily access the latest version of your retention schedule and privacy policies online, using custom views and advanced search to filter to only the retention rules and privacy obligations that apply to them. You also have the option to connect policy to your content infrastructure through an open application programming interface (API).

You'll Be Able To

• Keep your retention and privacy policy management connected, current and compliant
• Save on information storage costs
• Reduce unnecessary exposure to data breaches
• Reduce effort of responding to privacy requests
• Quickly locate personal information to help your company respond to privacy issues and requests
• Reduce risk of fines
• Distribute policy to content owners and infrastructure
• Quickly access what you need when you need it
• Join a collaborative user community