The book
Every day a company is assessed by a customer, a partner or an investor. And every day a company believes it is compliant. The difference lies in what it can prove.
Privacy due diligence is not just another audit. An audit checks whether the rules were followed at a given moment; due diligence examines in depth how the company collects, processes, protects and shares data, in order to surface hidden risks before they turn into fines, disputes or obstacles in a negotiation. It is the difference between checking that a house’s wiring meets code and inspecting its foundations, roof and pipes before buying it.
The book explains what due diligence is and why privacy has become an essential part of it, shows step by step how to carry it out, from document review to ongoing monitoring, and devotes a chapter to the chain of processors and sub-processors, an area of growing attention for European authorities.
It draws on more than 200 engagements in the field and presents the Pro Diligence Privacy™ method developed by Schmidt Consulting Privacy.
Who it is for
- Business owners and executives who want to protect company value, including ahead of a sale or a capital raise
- Investment funds and M&A advisors
- In-house counsel, DPOs and consultants
- Procurement and compliance managers who assess suppliers and partners
What you will find
- The difference between due diligence and an audit, and why it matters
- The GDPR as a foundation for building the business, not an obstacle
- The concrete risks of skipping privacy due diligence, and the opportunities it creates
- Five operational phases: document review, department interviews, gap analysis, corrective actions, ongoing monitoring
- Due diligence on processors and sub-processors in light of EDPB Opinion 22/2024
- How to choose the right due diligence partner
