Privacy Management
Operationalizes GDPR/CCPA and privacy programs.
Overview
Privacy platforms automate consent, data-subject requests, records of processing, and assessments for GDPR, CCPA, and similar laws. They bridge legal obligations and security/data controls. Sold as modular SaaS suites priced by modules and scale. Often shares tooling with GRC and DSPM.
Operationalizes GDPR/CCPA duties where privacy law applies.
Advantages
- OneTrust market leader with broad modules
- automates DSARs, consent, and RoPA
- bridges legal and security.
Trade-offs
- OneTrust module pricing adds up
- implementation-heavy
- becomes shelfware without clear process ownership.
Open-source option
Ethyca Fides is a credible self-hostable open-source privacy engineering platform covering data mapping, consent and DSAR automation.
Vendors & tools in this area
Data + privacy + AI governance (PrivacyOps); acquired by Veeam (closed Dec 2025).
Visit site →Open-source privacy engineering: data mapping, consent and DSR automation — GitHub repo archived by Ethyca, read-only since Aug 2026.
Visit site →AI-governance-forward privacy platform; encodes 'Do Not Train' and purpose limits directly into data pipelines, not just DSAR/consent workflows.
Visit site →Consent and permissioning platform built around enforceable, cross-system data-use rules rather than cookie banners alone.
Visit site →