Security & IP PostureJanuary 19, 20263 min read
Data Privacy Skeletons That Surface in Technical Diligence
Privacy findings rarely come from the policy. They come from the copies of production data nobody remembered making.
Privacy exposure in a technical review is usually operational rather than legal. The policy is fine; the practice diverged from it years ago and nobody reconciled the two.
Common discoveries
- Production data copied into staging or an analytics warehouse
- Personal data retained well past the stated retention period
- Third-party tools receiving more data than the privacy notice describes
- Deletion requests handled in the application but not in backups
Each of these is fixable. Each is also a disclosure item, and disclosure is far cheaper than discovery.
Working an active deal?
We respond within one business day with fit and a flat-fee scope.
Tell us about the deal