OneTrust DataGovernance Reviews

I use OneTrust DataGovernance for managing various aspects of data, including data inventory and data flow analysis. The tool covers almost all aspects we are using, including incident handling processes. If there is a data breach, the tool provides coverage.

The data flow analysis is especially valuable from a security perspective. It helps set a perimeter concerning security aspects. 

Additionally, the data and metadata function is quite useful for managing the collected data centrally. The tool aids in identifying important aspects of protection, prioritizes security measures, and provides insights from a legal and GDPR perspective.

For OneTrust, we [and the clients] use it not just for governance, but for GRC (Governance, Risk, and Compliance) purposes. 

OneTrust has materials for compliance that can be selected or built into packages. They offer pre-built packages for compliance with HIPAA and other requirements. They also provide standard plans that make it easy to send reports with the necessary parameters.

The customers prefer OneTrust GRC for compliance, not just for Data Governance. In an enterprise, they have compliance teams, risk teams, and government teams. So, Information Axon and Collibra are targeted toward data governance teams, but GRC and compliance teams prefer to use OneTrust or Archer.

I've implemented the solution for two clients. One implementation was for risk identification and inventory, while the other was focused on data subject rights for development.

One valuable aspect of the solution is its cloud-based nature. Users can just pay the fees and get started instantly.

We use the platform for conducting privacy assessments, vendor assessments, managing IT asset management, privacy and security assessments, managing ISO and ISM certification requirements, and managing internal and external audits.

OneTrust seamlessly manages multiple geolocations, providing automated data management based on location and enabling seamless connectivity with APIs. It has also significantly reduced our overall budget to manage a platform for specific activities.

I use the product to register processing activities and the automation tool for quality impact assessments in high-risk areas.

The product's valuable feature is its integration with other tools, such as risk management and risk assessment. It supports both data privacy and information security needs.

We use the product to ensure compliance, handle data subject requests, and manage privacy-related activities in an environment.

The platform enhances the collaboration between data governance teams and other business units. As a request collection window, it facilitates a streamlined workflow where incoming requests are efficiently processed and notified to the relevant departments or data owners.

We use the solution to manage data usage and cookie preferences on any of our company’s websites.

The product provides visibility across the scope of companies we have.