RESOURCE ARTICLE

Building a Program that Provides Value

This series examines how to assess a privacy program’s value, take inventory of what matters, metrics to show effectiveness and develop a strong communication plan.

Published

Contributors:

Chris Pahl

CIPP/C, CIPP/E, CIPP/G, CIPP/US, CIPM, CIPT, FIP

Chief Privacy Officer

County of Santa Clara

This series offers a practical approach for privacy leaders seeking to demonstrate and elevate the real value of their programs within the organization. It provides an overview of understanding the scope and maturity of existing efforts, taking meaningful inventory, exploring how to design and socialize metrics that tell a compelling, credible story about program performance, and focusing on communication and showing how clear, consistent messaging can deepen stakeholder engagement, build trust, and secure long‑term support for privacy initiatives.

Series Overview

Understanding what you have
This article explains how to assess the current value of a privacy compliance program by cataloging applicable regulations, assigning accountability, documenting controls, and establishing meaningful metrics to demonstrate program maturity and organizational impact.
View article

Taking inventory
This article details how to build a regulatory and control inventory by identifying privacy regulators, documenting requirements, and assigning accountability—ensuring the privacy program can manage risk effectively and demonstrate the full scope of its obligations.
View article

Using meaningful metrics
This article outlines how to measure a privacy program’s effectiveness through objective, well‑defined metrics—such as incident trends, customer complaints, program maturity, and audit results—to support informed decision‑making and highlight emerging risks.
View article

Making your communication matter
This article emphasizes the importance of proactive, engaging communication to sustain a privacy program’s value, recommending tactics such as leveraging existing communication channels, unifying messages with partners, using metrics in outreach, and making topics personally relevant to employees.
View article

CPE credit badge

This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.

Submit for CPEs

Contributors:

Chris Pahl

CIPP/C, CIPP/E, CIPP/G, CIPP/US, CIPM, CIPT, FIP

Chief Privacy Officer

County of Santa Clara

Tags:

BenchmarkingCustomer trust and expectationsData securityProgram managementRisk managementStrategy and governanceFinance and bankingGovernmentHealth careProfessional servicesTechnologyPrivacy

Related resources