IAPP-EY Annual Privacy Governance Report 2021

This year’s “Privacy Governance Report,” produced in collaboration with EY and EY Law, analyzes the state of the privacy profession in 2021. It examines the ongoing effects of the COVID-19 pandemic on the privacy profession, including the evolution of remote/hybrid/office work, as well as expectations about the future of business travel, legal compliance issues related to the EU General Data Protection Regulation and California Consumer Privacy Act, as well as the progress of organizations in adapting to new laws, including the California Privacy Rights Act and other U.S. state laws, as well as Brazil’s General Data Protection Law. It also details the organizational architecture of privacy teams, taking an in-depth look at the privacy leadership, reporting structures, and privacy staff and budgets. It covers the privacy team’s core responsibilities, shifting priorities and efforts to benchmark their privacy programs. Finally, it examines the workflow around data subjects and processing vendors, answering questions ranging from how long it takes a typical organization to respond to a data subject request to what assurances most organizations require from vendors that handle their data.