Information governance and privacy services

EY data classification services include scanning and analyzing unstructured and structured data sources to identify data that require additional protection (e.g., personally-identifiable information, intellectual property) or data that may immediately be disposed of (redundant, outdated or trivial). Leveraging advanced text analytics, artificial intelligence (AI) technologies and targeted interactions with data stakeholders, EY professionals work across industry sectors to help clients understand how their data is sourced, used and shared, as well as identify sensitive and personal data subject to legal and regulatory scrutiny.

EY teams help organizations design and implement workflows to efficiently respond to DSARs based on their data privacy requirements, processing activities, organizational structure and IT environment. In designing workflows to address a DSAR, EY teams identify when it is necessary to redact non-relevant and confidential information across the enterprise and build in the appropriate processes. Aided by an interactive EY case management tool, compliance and legal professionals can review DSARs for relevancy, privilege and confidentiality. The tool’s robust audit trail capability allows investigators to perform thorough reviews and provide strong supporting documents in the event of a regulatory inquiry.

Privacy impact assessment (PIA) — EY teams review a solution’s entire life cycle to identify potential compliance gaps, and document how privacy protection is embedded based on relevant regulatory or legal requirements. Operating under one standard global methodology, they also help build PIA workflows and controls for ongoing compliance monitoring as the solution evolves over time. Using AI and data analytics technologies, the teams perform risk analysis to provide the organization with the risk and business insights it needs to solidify its privacy risk management programs.

EY teams help companies manage separation activities for both electronic and physical documents during complex merger and acquisition activities. Using advanced text analytics, electronic discovery and document review technologies, EY professionals collaborate with companies throughout the transaction and help them develop principles, guidelines, decision matrices and detailed plans for data separation and integration. Services also include demand and capacity planning, release coordination, inventory creation and overall project governance. EY teams offer a “low-touch” approach for hard copy records that relies on statistical sampling and machine learning to reduce the need for manual reviews.