Directions

First, review the existing Callego Privacy Statement document, produced before GDPR compliance was an issue. It is linked in the milestone assignment in Module Four of your course.

To complete this milestone, you will submit a new version of the Callego privacy statement that you have revised to align with the security principles of the GDPR. You will also explain your thinking or work process and the choices that you made to establish this new statement. This explanation should answer the question: how does the revised statement meet the GDPR concept of reasonableness or due care?

Note that your audience for the privacy statement is customers and clients who contact Callego. Your audience for the explanation, justification, and discussion is company personnel across Callego. Be sure to write in a manner appropriate to the audience so that nontechnical readers can read easily.

Specifically, you must address the following rubric criteria:

1. Revised Privacy Statement: Revise Callego's privacy statement to be clear and to provide sufficient detail to illustrate adherence to the GDPR.
2. Explanation of Work Process: Explain in sufficient detail the thinking and work process that led to the revised privacy statement. What did you do, and why?
3. Justification Under GDPR: Justify how the revised statement exhibits privacy principles and standards of due care that adhere to the principles of the GDPR.
4. Description of Impacts on Organization: Describe the potential impacts of the revised privacy statement on the organization's mission, operations, and culture.
   1. Although it is important to note potential concerns, be certain to emphasize how GDPR compliance can also support or enhance Callego's mission, operations, and culture, or otherwise give it an advantage over its competitors.