Privacy is top of mind for organizations and consumers today, and concerns about how personal data is handled are steadily increasing. To meet regulatory requirements and build customer trust, organizations need to take a "privacy by default" stance and empower individuals to have control over their data. Robust privacy solutions are essential not only in ensuring regulatory adherence, but also in cultivating a culture of transparency, accountability, and respect for user privacy.
Microsoft Priva is a set of solutions that support privacy operations across an organization's data landscape. Together, these solutions help your organization:
Consolidate privacy protection across your data landscape.
Standardize compliance and streamline regulation adherence.
Encourage greater user confidence, accelerate digital transformation, and mitigate privacy risks.
With the power of the Microsoft Priva family, organizations can automate the management, definition, and tracking of privacy operations at scale to help ensure that personal data stays private, secure, and compliant with regulations.
What's new
The Priva suite of solutions has expanded to include the preview release of four new solutions: Consent Management, Privacy Assessments, Subject Rights Requests for data beyond Microsoft 365, and Tracker Scanning. These new solutions, along with the generally available solutions, can be found in the new Microsoft Priva portal (preview).
The Microsoft Priva family of solutions empowers your organization to automate the management, definition, and tracking of privacy procedures at scale to help ensure that personal data stays private, secure, and compliant with regulations.
Solutions that are in preview:
Consent Management
Privacy Assessments
Subject Rights Requests for data beyond Microsoft 365
Tracker Scanning
Solutions that are generally available (GA):
Privacy Risk Management
Subject Rights Requests for data within Microsoft 365
Consent Management (preview)
Priva Consent Management is a regulatory-independent solution for streamlining the management of consented personal data. Consent management empowers organizations to effectively track consumer consent across their entire data estate, including structured, unstructured, and multicloud data. Consent management provides customizable consent models and a centralized process for publishing consent models at scale to multiple regions.
Privacy Assessments (preview)
Priva Privacy Assessments automates the discovery, documentation, and evaluation of personal data use across your entire data estate. Using this regulatory-independent solution, you can automate privacy assessments and build a complete compliance record for the responsible use of personal data.
Privacy Risk Management
Priva Privacy Risk Management provides visibility into your organization's data. Customizable and easy-to-create policies help you identify privacy risks in your data estate and enable easy remediation to help reduce risks.
Subject Rights Requests
Priva Subject Rights Requests helps organizations help alleviate the complexity and length of time involved in responding to data subject inquires. Subject Rights Requests provides automation, insights, and workflows to help organizations fulfill requests more confidently and efficiently. New in preview: Subject Rights Requests for data beyond Microsoft 365 helps you fulfill requests involving data across your entire data estate.
Tracker Scanning (preview)
Priva Tracker Scanning empowers organizations to automate the identification of tracking technologies across multiple web properties, driving the efficient management of website privacy compliance. With Tracker Scanning you can automate scans for trackers, evaluate and manage web trackers, and streamline compliance reporting.
The new Priva portal (preview)
The new Priva portal (preview) is designed to give you streamlined access to all Priva privacy protection and privacy risk management capabilities.
What's in the new Priva portal? The new Priva portal is where you'll find the new preview solutions of Consent Management, Privacy Assessments, Subject Rights Requests for data beyond Microsoft 365, and Tracker Scanning. Privacy Risk Management and Subject Rights Requests for data within Microsoft 365 are also integrated into the new portal, though you can also continue using them in the classic Microsoft Purview compliance portal.
How and where Priva identifies items with personal data
Personal data is typically personal information that is related to a living person that can be used to identify that person. It may be a data type that can directly identify the individual, such as a name, passport number, social security number, and so on, or combinations of different data types that can be used to identify the individual. The definition of personal data or personal information may vary under applicable law, so make sure you understand the types of data for which you have legal obligations.
Priva utilizes foundational capabilities of Microsoft Purview to help you identify these personal data types based on your settings by using data classifications and sensitive information types (SITs). Organizations that create custom classifications and SITs can use them in Priva.
Priva evaluates your organization's data stored in the following Microsoft 365 services within your Microsoft 365 tenant:
Exchange Online
SharePoint Online
OneDrive for Business
Microsoft Teams
Priva evaluates data that is only within your organization's Microsoft 365 environment. It doesn't access personal data that isn't part of the organization's Microsoft 365 environment. For example, it doesn't access a user's personal Microsoft 365 account.