Privacy & Outsourcing

Outsourcing increases the complexity for dealing with privacy. An organization may outsource a part of its business process and with it part of its responsibility for privacy; however, the organization cannot outsource its accountability for privacy for its business processes. Complexity increases when the entity that performs the outsourcing service is in a different country and may be subject to different privacy laws or often no privacy requirements at all. In such circumstances, the organization that outsources a business process will need to ensure that it manages its privacy responsibilities appropriately.