1. Data Privacy and Security Data Privacy Self- Assessment Data Security Self- Assessment Video Tips Privacy Legion Newsletter Home ScreenLanding Screen Data Privacy and Security Data Privacy Resources Data Security Resources Newsletter Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources

2. Data Privacy Self-Assessment (Screen #1) Data Privacy self-assessments allow organizations to analyze its privacy policies, procedures and practices, identify privacy risks that are present and determine if organizational controls are in place to mitigate those risks, and help organizations develop and implement privacy improvements and controls where necessary to reduce risks. Upon completion of the self-assessment, you should review your answers and determine if any processes and procedures need attention. Some organizations will choose to address issues entirely on their own by using existing resources and in-house talent. Others may decide to seek external consultants to provide an objective point of view or some specialized expertise that is not available in-house, to address issues uncovered during the self-assessment. Regardless of your approach, it is important to address issues or concerns as soon as possible. Take Data Privacy Self-Assessment Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Data Privacy Self-Assessment (Screen #2) Demographics Which of the following categories best describes your industry? Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Next Save and ExitSave

3. Data Privacy Self-Assessment (Screen #3) Question 1 of 40 Program Ownership Does your organization have a data privacy protection program? We do not have a data privacy program. We recognize the importance of a data privacy program, but have not established one. We have a data privacy program. We believe we're compliant with rules and regulations but have not codified our processes and procedures. We have data privacy program with documented processes and procedures and are compliant with all rules and regulations. Privacy policies are incorporated into strategic business goals and objectives. The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Next Save and ExitSave Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Data Privacy Self-Assessment (Screen #4) Question 2 of 40 Program Ownership Has your organization designated an individual to oversee its data privacy program? The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Next Save and ExitSave Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources

4. Data Privacy Self-Assessment (Screen #5) Question 3 of 40 Protection of Sensitive Personal Information Does your organization have a process for identifying the types of sensitive personal information it collects? The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Next Save and ExitSave Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Data Privacy Self-Assessment (Screen #) Question 40 of 40 Data Breach Notification and Incident Response Management Program Has your organization established data breach notification and incident response program? Next Save and ExitSave The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources

5. Data Privacy Self-Assessment (Screen #) Review Your Answers Do Not Review Your Answers and Continue Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Data Privacy Self-Assessment (Screen #) Submit Results (Opt In) Survey Results will be sent to you, CDSS and Blackpoint Technologies Submit Results (Opt Out) Survey Results will be sent to you Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources

6. Data Privacy Self-Assessment (Screen #) Legend Procedures or processes are generally informal, incomplete, and inconsistently applied. Non-Existent or non-functioning Procedures or processes exist; however, they are not fully documented and do not cover all relevant aspects. Procedures and processes are fully documented and implemented. and cover all relevant aspects. Reviews are conducted to assess the effectiveness of the controls in place. Data Privacy Self-Assessment (Screen #) View Results Now Exit and View Results in Emails Continue Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources

7. Data Privacy Self-Assessment (Screen #) Results Program Management The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Question 1: yada yada yada Question 2: Yada Yada Yada Privacy Program Management Tips https://privacyassociation.org/news/a/2013-01- 22-kick-starting-a-privacy-program Data Privacy Self-Assessment (Screen #) Results Protection of Sensitive Personal Information The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Suggested Improvement Areas ;aslkdf;asdkfjas;dkfjas;dkjasd;fkljsdf;lkj 0 1 2 Next Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources

8. Data Privacy Self-Assessment (Screen #) Results Protection of Sensitive Business Information The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Suggested Improvement Areas ;aslkdf;asdkfjas;dkfjas;dkjasd;fkljsdf;lkj Data Privacy Self-Assessment (Screen #) Results Regulatory and Statutory Compliance The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Suggested Improvement Areas ;aslkdf;asdkfjas;dkfjas;dkjasd;fkljsdf;lkj Next Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources

9. Data Privacy Self-Assessment (Screen #) Results Privacy Awareness and Training The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Suggested Improvement Areas ;aslkdf;asdkfjas;dkfjas;dkjasd;fkljsdf;lkj Data Privacy Self-Assessment (Screen #) Results Data Breach and Incident Response The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Suggested Improvement Areas ;aslkdf;asdkfjas;dkfjas;dkjasd;fkljsdf;lkj Next Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources

10. Data Privacy Self-Assessment (Screen #) Results Privacy Policies The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Suggested Improvement Areas ;aslkdf;asdkfjas;dkfjas;dkjasd;fkljsdf;lkj Data Privacy Self-Assessment (Screen #) Results Privacy Notices The self-assessment tool is not intended to be a substitute for professional assessment services. While the results of the Self-Assessment Tool may be of assistance to you, organizations should always seek the advice of a certified privacy professionals. Suggested Improvement Areas ;aslkdf;asdkfjas;dkfjas;dkjasd;fkljsdf;lkj Next Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources

11. Data Privacy Self-Assessment (Next to Final Screen) Congratulations! You’ve just taken the first step on improving your data privacy program. Should you like to discuss the results or if you would like assistance in improving your privacy program, please contact Carpe Diem Strategic Services Next Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources Home Data Privacy Self- Assessment Data Security Self- Assessment Privacy Legion Newsletter Video Tips Data Privacy Resources Data Security Resources