TerraTrue takes the repetition and guesswork out of privacy assessments. As you complete the Privacy Worksheet, we automatically determine which types of assessments are necessary and present you with a streamlined workflow to complete them in record time!

How does TerraTrue determine if a privacy assessment is necessary?

TerraTrue uses the following signals to determine whether an assessment is necessary:

  • We automatically trigger LIAs whenever you’re relying on legitimate interest as your basis for processing. The Privacy Worksheet helps you document bases for processing and even recommends when a particular basis may or may not be appropriate for different processing activities.
  • We automatically trigger DPIAs whenever a launch uses a special category of data or when a combination of factors in the launch would require a DPIA under the Article 29 Working Party’s Guidelines on Data Protection Impact Assessments.
  • We recommend optional PIAs whenever you use data in a way that carries extra privacy risk but doesn’t strictly require a DPIA. You can configure the risk level for different data types and data uses in your org settings.

As you work through the Privacy Worksheet, you’ll eventually reach an “Assessments” section. If we’ve identified any privacy assessments you need to complete, you’ll see them listed on this page. Click “Start Assessment” to begin.

If you would like to complete an optional privacy assessment, you can start one by picking a data use and any number of data types under the “Additional Assessments” header and then clicking “Add Assessment.” The optional assessment will work like any other — just click “Start Assessment” to begin.

When you complete the Privacy Worksheet, we’ll automatically generate PDFs of your assessments. You can view these from the launch summary page or in the Assessment Library.