Introduction to Microsoft Priva – Preparing for the SC-900 Exam

Do you need help understanding #MicrosoftPriva for privacy risk management and subject rights requests? You’re in the right place to get started!

FULL SC-900 Pluralsight Path

Video Summary

Here are the key points from the video:

• Introduction to Microsoft Priva: Helps organizations safeguard personal data and build a privacy-resilient workplace by identifying and protecting against privacy risks.
• Priva Privacy Risk Management: Allows setting up policies to identify and mitigate privacy risks, such as data overexposure, problematic data transfers, and unnecessary data storage.
• Empowering Employees: Priva empowers employees to make smart data handling decisions, reducing the burden on compliance and privacy teams.
• Priva Subject Rights Requests: Automates and manages data subject requests, making it easier and faster to respond to inquiries about personal data.
• Licensing Information: Available as an add-on to Microsoft 365, with separate licensing for its two main solutions: Privacy Risk Management and Subject Rights Requests.

For more information, read the transcript blog below, or watch the video above!

Video Transcript

Welcome to the third module of this course, where we will learn how Microsoft Priva can help us safeguard and respect privacy in our organization. This module will introduce Microsoft Priva and its two different solutions: Priva Privacy Risk Management and Priva Subject Rights Requests. By the end of this module, you’ll understand how Microsoft Priva can help your compliance team be more efficient in handling privacy and personal information.

Let’s start with an introduction to Microsoft Priva. Microsoft Priva helps companies safeguard personal data and build a privacy-resilient workplace by proactively identifying and protecting against privacy risks such as data hoarding, data transfers, and data oversharing. It empowers information workers to make smart data handling decisions and automates and manages subject requests at scale. Priva aims to build a privacy-by-default organization by proactively identifying and protecting against privacy risks, gaining visibility into the storage and movement of personal data, and empowering employees to make smart data handling decisions. It also helps manage subject rights requests at scale, reducing the manual workload for compliance and privacy teams.

Microsoft Priva has two main solutions: Priva Privacy Risk Management and Priva Subject Rights Requests. From a licensing point of view, Microsoft Priva is available only as an add-on and is not included in any other Microsoft 365 licenses. Each solution is licensed separately and has its own licensing model. Always check with your licensing professional, as licensing can often change.

Priva Privacy Risk Management allows you to set up policies that identify privacy risks within your Microsoft 365 environment and enable easy remediation. It focuses on three key areas: limiting data overexposure, finding and mitigating data transfers, and minimizing stored data. The Privacy Risk Management dashboard provides an overall view of your organization’s data in Microsoft 365, allowing privacy administrators to monitor trends and activities, identify and investigate potential risks involving personal data, and build policies. For example, you can create policies that detect if personal data is accessible by too many people and either alert admins or engage content owners directly to take action. You can also create policies to monitor the transfer of personal data between departments, regions, or between internal and external users, and automatically block messages in Teams that violate your policies. Additionally, it helps organizations minimize stored data by creating policies that detect personal data that has been stored or not modified for a certain amount of time, alerting privacy admins or engaging content owners to check if it’s still needed.

Priva Subject Rights Requests is designed to alleviate the complexity and time involved in responding to data subject inquiries. Several privacy regulations grant individuals the right to request to review or manage the personal data companies have collected about them. For companies storing large amounts of information, finding the relevant data can be a formidable task. Microsoft Priva enables you to create a subject rights request by providing the data subject’s information, such as name, residency, email, and relationship to the company. Microsoft provides built-in templates for common requests like data access, data export, or data deletion. Once a request is started, Priva kicks off a data evaluation to collect all relevant data and prioritizes content review by showing the most important content first. It creates a dedicated Teams channel for collaboration on the request and helps automatically generate reports, including the data package to be sent to the data subject, audit logs, and more.

In this module, we learned about Microsoft Priva, a suite of two independent solutions that empower privacy teams to reduce risk and automate subject requests. We explored how Priva Privacy Risk Management helps limit data overexposure, find and mitigate data transfers, and minimize stored personal data. We also learned how Priva Subject Rights Requests can help privacy teams automate data subject access requests to handle them at scale. This concludes the module on Microsoft Priva. Next, we will learn about compliance management in Microsoft 365.