OneTrust Privacy Automation

The OneTrust Privacy and Data Governance Cloud platform allows us to process our data subject requests with less time and friction, and has been impressively easy to use by all members of the team, even where in some cases, minimal training has been provided. Simply put, the user interface is user friendly and is clearly easy to use for beginners. Secondly, the OneTrust API Library is a very impressive aspect of the platform, and with iterative tweaking, has become very useful for streamlining business processes and ultimately automates away repetitive tasks. The third best point of this solution, from my team and I's perspective is the scan visualisation. The visualisation provides a very good overview of what has already been scanned by the tool, and is very concise and easy to understand. It is also worth mentioning that OneTrust support has always been quick to respond to our support requests, and are always happy to jump on a call and spend the time assisting with and troubleshooting any issues we surface.

The technical competency of OneTrust's Privacy & Data Governance Cloud to manage the consent and data subject requests (DSRs) is outstanding. It eases the procedure of recording user preferences across channels and takes care of DSRs solely, annihilating tons of my teams' time.

We like the breadth of functionality that the tools give as it ensures that organizations can address various regulatory requirements effectively within single platform. It also allows users to tailor the platform to their specific needs, enabling customization to align with regional regulations, industry standards, and organizational policies.

Despite the excellent features and benefits of the OneTrust Privacy and Data Governance Cloud solution, it has become quite cumbersome and time consuming to manage different permissions for different users. The different modules provided on the platform seem to have consistencies of varying degrees for different permission functions, making it a bit of a headache to assign the correct permissions to users based on their varying job roles. This makes it a challenge to put security at the forefront of the solution by using the principle of least privilege. It simply creates too much overhead. While OneTrust support, as previously mentioned, is world-class, the documentation has often been a source of tension and frustration. Some of the features on the platform are simply not documented to the degree of others, and as such, we have found ourselves, especially with scale, having to open ticket with support to seek more information on the features or known issues that should otherwise be documented. As also previously mentioned, the user interface is excellent, and is easy to use by beginners, however, for our more advanced uses, we have sometimes found that the interface crashes, particularly when executing tasks such as scans with significantly larger dictionaries.

Integrating OneTrust with our present detected SIEM (Security information and Event Management) system has been difficult to cope with. The data matrix proving wasn't logical for us, and we used a lot of OneTrust's support in order to obtain our platform work correctly.

The initial setup process is a bit complex.