Road to Data Privacy Capability: Integrated Data Privacy Capability Model – Webinar Summary

On 2 Dec 2022, Straits Interactive and DPEX Network held a webinar on the new Integrated Data Privacy Capability Model (IDPM) – a capability model that offers a detailed step-by-step guide to designing, running and evaluating a strong data privacy programme for any organisation – and the associated certification for Integrated Data Privacy Professional (IDPP).

The model, co-authored by Straits Interactive and first introduced in October 2022, is an exciting new development in data governance and privacy, and provides a roadmap for both GRC and privacy professionals, to look at privacy from an integrated governance, risk management and compliance perspective. Achieving the IDPP certification demonstrates your knowledge of how to build, run and assess an effective and agile data privacy programme.

The panel of speakers were:
• Kevin Shepherdson, CEO and Founder of Straits Interactive
• Carole Switzer, Co-Founder and President of OCEG
• Lyn Boxall, Privacy Lawyer at Lyn Boxall LLC
• William Hioe, Regional Head, Consultancy, Straits Interactive

To learn more about data governance and data protection certification programmes, including local and international advanced diploma programmes, please visit our Courses page on the DPEX Network portal. You can also find out more about the IDPP Hands-on course there.

To watch the webinar in full, please sign up to be a DPEX Network community member, log in and visit the Events section on dpexnetwork.org, where the on-demand recording will be made available in two weeks following the webinar.

What is the Integrated Data Privacy Capability Model and why is it needed now?

Prior to the Covid-19 pandemic, awareness about data privacy principles and data protection regulations had been rising, as hacks and data leaks were becoming a growing trend.

Three of the panellists, Shepherdson, Boxall and Hioe, who are co-authors of the IDPM, had also co-authored the book, 99 Privacy Breaches to Beware of, which offered practical data protection tips from real-life data breaches, and was endorsed and used as a reference for operational practices by regulators around the world.

From their experience writing the book and observing that more countries and regions are introducing data protection regulations, and as data protection practitioners and consultants, the trio saw the need for a new standard.

“We hear lots of stories, we see lots of headlines in the papers about state-sponsored, sophisticated cyber attacks [causing the rise in breaches], but more often than not, it’s really just something that’s been done carelessly by a staff or even a disgruntled employee,”