The Data Protection Officer or Chief Privacy Officer is the conductor of privacy, she/he assists the organisation in establishing and maintaining compliance with privacy legislations, namely GDPR, ePrivacy, PIPEDA, CCPA, LGPD, etc. He is a compliance advisor in charge of promoting privacy as a corporate value, managing the data protection program, developing a Privacy Information Management System, and acting as the point of contact for Data Protection Authorities.

A DPIA|PIA is a risk and compliance analysis of a specific program or activity that presents high risks to the privacy rights and freedoms of individuals. More precisely, a PIA is a process designed to identify and mitigate risks by reviewing the processing activity, assessing its necessity and proportionality, and managing its impacts to the privacy of individuals. It is a tool to help an organization meet its legal requirements and demonstrate compliance under certain privacy legislations.

The EU Representative is a person established in the EU tasked with representing the organisation with regard to their obligations under the GDPR Art. 27. The designation of an EU Representative is mandatory when the organization is not established in the EU but is processing activities are related to:

1. The offering of good or services to data subject in the EU
2.The monitoring of their behaviour, which takes place within the EU

As a starting point for a privacy program, a PCA provides a comprehensive analysis of the organization's compliance with relevant privacy legislation by assessing its privacy management and information security systems and practices. It measures the level of maturity of the organization's privacy framework, identifies compliance gaps within the identified regulatory scope, assesses the level of data protection risks and prioritizes corrective actions for the compliance program.

A PRP consist of the definition and organization of compliance and privacy activities throughout the life cycle of personal data with the client organization and/or HISYS-SEC resources. A privacy program does not necessarily have a closing date and is composed with 3 phases: Build, integrate, demonstrate. A Privacy Compliance Program is a key asset helps organizations manage project activities and operations to meet the requirements of one or more Privacy regulatory and standard frameworks in a sustainable manner over the long term.

Privacy awareness and trainings are based on one or several privacy regulations and best practices or framework (e.g. Privacy by Design). They are offered to various profiles inside an organization: top management, employees, privacy referents, HR team, marketing team. It addresses verticals:

1.Cloud & privacy,
1.AI & privacy.