OCEG is pleased to announce the release of the new Integrated Data Privacy Capability Model and certification for data privacy professionals. At a time when data breaches are on the rise and regulators around the globe are expanding regulations and taking stronger enforcement actions, the detailed guidance of the Capability Model is invaluable. Anyone may download this free, open-source set of standards which offers step-by-step guidance on designing, running and assessing a data privacy program suitable for your organization. The Capability Model is jurisdiction agnostic and no matter what regulatory scheme your organization operates under, it will be applicable. In conjunction with publication of the Capability Model, OCEG is also now offering a new certification for individuals who are knowledgeable about the Model and how to apply it, the Integrated Data Privacy Professional or IDPP certification. Information about both is available on the OCEG website.
Development of the IDP-CM was led by: Carole Switzer, OCEG Co-Founder & President, with input from Scott Mitchell, Founder and Chair, OCEG, and Kelly Ray, GRC Solutions Strategist (retired).
We would like to thank the following individuals for contributing to the development of the Capability Model. Their expertise and experience in the governance, management, and assurance of data privacy efforts in many countries were invaluable to the development of a model that we hope will be useful to organizations of all types and sizes.
- Kevin Shepherdson, GRCP, FIP, CIPP/E, CIPP/A, CIPT, CIPM, Certified DPO (Exin)
- Lyn Boxall, GRCP, GRCA, FIP, CIPP/E, CIPP/A, CIPM, Certified DPO (Exin), LLM
- William Hioe, GRCP, FIP, CIPP/E, CIPP/A, CIPT, CIPM, Certified DPO (Exin)
- Celine Chew, GRCP, FIP, CIPP/E, CIPP/A, CIPT, CIPM, Certified DPO (Exin)
- Dr. Prapanpong Khumon, Advisor to Secretary-General of the Personal Data Protection Committee of Thailand and Associate Dean at School of Law, University of the Thai Chamber of Commerce
- Mr. Raymund Liboro, Privacy Commissioner and Chairman, National Privacy Commission of the Philippines (Retired)
- Mr. Luis Montezuma, Deputy Assistant to the Chair, Colombia Data Protection Authority
- Mr. Yudhistira Nugraha, ECPC-B DPO, D. Phil (Oxon), Director of Jakarta Smart City, and Privacy and Cybersecurity Lecturer - Telkom University, Indonesia
- Mr. Stephen Wong, Practicing Barrister-at-Law and Former Commissioner, Privacy Commission for Personal Data, Hong Kong
- Dr. Sonny Zulhuda, Assoc. Professor and Cyber Law Coordinator, International Islamic University, Malaysia
- Ms. Angela Xu, Privacy and Data Governance Counsel
- Mr. Kevin Fumai, GRCP, CIPP/US, CIPP/E, CIPM, CIPT, FIP, PLS, CDPSE
- Mr. Nigel Hedges, Group Head of Cybersecurity, Kmart Australia Limited
- Dr. Rebecca Wynn, Global CISO and Chief Privacy Officer, Click Solutions Group
- Mr. Keith Carrington, Chief Compliance and Privacy Officer, North American Dental Group (now Vice President, Compliance Officer Vice President, Compliance Officer, Heal)
- Mr. Ron Daniels, Information Governance Manager, Jones Day (now Data Protection Lead, Mathematica)
- Ms. Sanghamitra Saha, Former Assoc. Director, IT Risk Management, EY (now Lead GRC / ISO Auditor & Program Director Lead GRC / ISO Auditor & Program Director, Cirrus Cybersecurity Group)
- Mr. Scott Tashlik, Global Head of Internal Audit, USI Insurance Services
- Mr. Stewart Dresner, Chief Executive, Privacy Laws & Business
- Ms. Teresa Troester-Falk, CEO and Founder, BlueSky Privacy
- Mr. Jean-Louis Reyneart, Managing Director, ORSA Risk Solutions
- Ms. Karen Schuler, GRC Practice Leader and Privacy Co-Leader, BDO
- Adj A/Prof. Lanx Goh, Head of International Privacy and Global Data Protection Officer, Ant Group (now Senior Director, Global Head of Privacy, Prudential)