Privacy in 2019: Who is in your privacy team?

The latest annual Privacy Governance Report from EY and the International Association of Privacy Professionals (IAPP) was released on 24 September 2019.

In the second of our series on the report, we look at the global trends and changing face of privacy management within organisations, and the long-running question of where privacy should, and does, fit within the executive management team.

Where does privacy sit?

Ever since the introduction of the General Data Protection Regulation (GDPR) and the rapid rise of the Data Protection Officer (DPO), organisations have struggled to find a natural home for this function. While the GDPR mandates that the DPO report directly to the highest management level of an organisation, this doesn't necessarily mean they occupy a spot in the C-Suite. While 72 per cent of respondents confirmed their organisation had at least one DPO, the report identified a number of different approaches, with business variously categorising