This process is important as it is the first step towards compliance. Once it has been established what legal regime an organization is subjected to, our audits are designed to review the PII management process, that is the entire life-cycle of PII from collection to deletion.
This approach takes into account a vast array of considerations such as user consent, nature of PII and purpose of collection, data architecture, governance, awareness, third party services, security measures, risk management, etc., to culminate with a detailed report comprising recommendations and priorities.