Global privacy standards

Get and stay compliant with data privacy standards like GDPR and CCPA

Global privacy standards

Meeting global privacy standards involves more than just providing features in a product. We believe in giving you, as a Customer Identity and Access Management (CIAM) stakeholder, the necessary guidance and facts for your business to satisfy legal and compliance asks.

Strivacity can centrally manage all customer personally identifiable information (PII) either via the Strivacity Identity Store or your own existing identity store so personal data isn’t scattered or duplicated across directories and databases.

Easy to use self-service options empower your customers to help themselves

Learn below about how Strivacity can shoulder the burden of compliance with the mainstream global privacy standards.

The cost of non-compliance

CCPA Maximum Penalty:

Up to $2,500 that can increase to $7,500 for every violation

GDPR Maximum Penalty:

4 percent of global annual turnover, or €20 million, whichever is the higher amount

General Data Protection Regulation (GDPR)

The GDPR is a European Union (EU) regulation that went into effect on May 25, 2018.

The primary goal of GDPR is to provide a set of data protection laws that protect EU citizens across any business that delivers goods or services to customers in the EU, regardless of where the business is based.

How Strivacity helps with GDPR compliance

Buzzword alert! – Strivacity is a GDPR-compliant, cloud-based CIAM solution. That was a mouthful! Now to the important part. We help with GDPR compliance by enabling users to self-service consent management for GDPR requirements including:

  • Self-service consent management
  • Personal data export
  • Full self-service management capabilities, providing coverage of all major areas, including:
    Right to be informed
    Right to stop processing
    Right to data portability
    Right to restrict processing
    Right to access
    Reject automated decisions
    Right to correction
    Right to be deleted
  • Support of the Kantara Initiative, providing consent receipt specification.
  • Anonymization of customers’ PII that may be distributed across your CIAM user directories or databases
  • Anonymization of customers’ PII that may exist across event logs across your CIAM infrastructure

California Consumer Privacy Act (CCPA)

Protip

Even if you've prepared for GDPR, you will still need to revisit your privacy policy due to the differences in requirements with CCPA.

How Strivacity helps with CCPA compliance

Here are some more buzzwords. Strivacity is a CCPA-compliant, cloud-based CIAM solution. We help with CCPA compliance by providing full customer identity management and enabling users to self-service consent management for CCPA requirements including:

  • Self-service consent management
  • Defining and managing consents, consent for data processing purposes and user attributes per consent.
  • Full customer identity management so brands can individually remove customers if required
  • Support of the Kantara Initiative, providing consent receipt specification
    • The following are consent-controlled based on customer preference:
      • Customer identity provisioning to third-party systems
      • Sharing of identity attributes via federation
      • Customer management of info during registration
      • Defining data processing use cases and user attributes

Strivacity supports the Kantara Initiative for providing consent receipt specs. We also anonymize customer PII that may be distributed across your CIAM user directories or databases or exist across event logs in your CIAM infrastructure.