{"id":5301,"date":"2024-10-03T06:01:00","date_gmt":"2024-10-03T12:01:00","guid":{"rendered":"https:\/\/trustarc.com\/?post_type=resource&#038;p=5301"},"modified":"2025-09-24T08:51:33","modified_gmt":"2025-09-24T13:51:33","slug":"privacy-contracting-foundations","status":"publish","type":"resource","link":"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/","title":{"rendered":"The Foundations of Privacy Contracting"},"content":{"rendered":"\t\t<section id=\"block_3d9b67a0db39c5e22aa36df522019663\" class=\"resource-intro intro-simple\">\n\t\t\t<div class=\"container\">\n\t\t\t\t\t\t\t\t\t<strong class=\"sub-title block uppercase\">article<\/strong>\n\t\t\t\t\t\t\t\t\t\t<h1>The Foundations of Privacy Contracting<\/h1>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\n\n\t<section id=\"block_8ed34cb779a526deba1df9826505cd47\" class=\"columns-content\">\n\t\t<div class=\"container\">\n\t\t\t<div class=\"left\">\n\t\t\t\t\t\t<div class=\"person-wrap\">\n\t\t\t<a href=\"https:\/\/trustarc.com\/people\/cathleen-doyel\/\">\t\t\t\t\t\t\t<div class=\"img-holder\">\n\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"110\" height=\"121\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/05\/peopl-cathleen-doyel2-1.png\" class=\"attachment-full size-full wp-post-image\" alt=\"\" \/>\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"text-holder\">\n\t\t\t\t\t\t\t\t\t\t\t<strong class=\"block name\">Cathleen Doyel<\/strong>\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"block position\">Deputy General Counsel, TrustArc<\/span>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/a>\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t<div class=\"middle\">\n\t\t\t\t<div class=\"content\">\n\t\t\t\t\t<h2>Privacy PowerUp Series #5<\/h2>\n<p>Businesses handle an enormous volume of personal data today, making privacy contracting a crucial aspect of data management. Understanding the intricacies of <a href=\"https:\/\/youtu.be\/VOqq82wRAtc\" target=\"_blank\" rel=\"noopener\">privacy contracting<\/a> is essential for legal professionals, especially those working in privacy.<\/p>\n<p>This article aims to provide a comprehensive guide to privacy contracting, focusing on Privacy and Security Disclosures, and Policies and Addenda.<\/p>\n<h2>Setting the stage: The goals of privacy contracting<\/h2>\n<p>Before getting into the specifics, start by understanding your overarching goal in privacy contracting. Whether you&#8217;re building a privacy program from scratch, or trying to keep a customer satisfied, <strong>the primary objective should always be to build trust.<\/strong><\/p>\n<p>Robust privacy agreements can establish and reinforce your brand&#8217;s credibility, while poor execution of these documents can erode trust.<\/p>\n<h2>Privacy and security disclosures<\/h2>\n<p>Think of Privacy and Security Disclosures as the exterior shell of your privacy program. These non-negotiable documents provide vital information on a company&#8217;s data protection practices.<\/p>\n<h3>Privacy policy<\/h3>\n<p>Also known as a Privacy Disclosure or Privacy Statement, this document explains how a company collects, uses, stores, and shares personal information. A well-crafted Privacy Policy should include:<\/p>\n<ul>\n<li>Types of data subjects (website users, customers, partners, employees)<\/li>\n<li>Types of information collected<\/li>\n<li>How data is used and\/or shared<\/li>\n<li>Links for data subjects to contact the company or exercise their data subject rights<\/li>\n<\/ul>\n<h3>Sub-processors and affiliates disclosure<\/h3>\n<p>This disclosure provides information about the sub-processors and affiliates a company may share personal data with. It should include:<\/p>\n<ul>\n<li>Sub-processor entity details<\/li>\n<li>Location of the sub-processor<\/li>\n<li>Purpose of data processing<\/li>\n<li>Safeguards for data transfer (e.g., DPF, SCCs)<\/li>\n<li>Data privacy representative\/contact information<\/li>\n<\/ul>\n<h3>Technical and organizational measures (TOMS)<\/h3>\n<p>TOMS set out an organization\u2019s privacy, security, governance, and compliance commitments. Key elements include (as applicable):<\/p>\n<ul>\n<li>Encryption measures<\/li>\n<li>Data center locations<\/li>\n<li>Physical security controls<\/li>\n<li>Third-party compliance audits<\/li>\n<li>Access controls<\/li>\n<li>Penetration testing<\/li>\n<li>Data deletion, export, and return policies<\/li>\n<\/ul>\n<h3>Cookie policy<\/h3>\n<p>If your organization uses cookies, the Cookie Policy should provide detailed information about the types of cookies collected (essential, analytics, content) and how data subjects can disable or delete certain cookies.<\/p>\n<h2>Policies and addenda<\/h2>\n<p>Once you&#8217;ve established a solid shell with your Privacy and Security Disclosures, it&#8217;s time to get into contracting. These agreements are pivotal in establishing or eroding trust with potential customers.<\/p>\n<h3>Data Processing Agreement (DPA)<\/h3>\n<p>A DPA is a legal contract between a data controller and a data processor. It outlines the rights and obligations of the parties involved in data processing.<\/p>\n<p>Key clauses typically include:<\/p>\n<ul>\n<li>Purpose of data processing<\/li>\n<li>Type of data processed<\/li>\n<li>Data processing instructions<\/li>\n<li>Duration of data processing rights<\/li>\n<li>Obligations of both parties<\/li>\n<\/ul>\n<h3>Acceptable use policy<\/h3>\n<p>This document describes prohibited uses of an organization\u2019s services, content, output, or documentation. It includes:<\/p>\n<ul>\n<li>Usage Restrictions<\/li>\n<li>Prohibition of illegal, harmful, or offensive use<\/li>\n<li>Rights to monitor and enforce prohibitions<\/li>\n<\/ul>\n<h3>Accessibility policy<\/h3>\n<p>For organizations with an online presence, this is where to showcase a commitment to <a href=\"https:\/\/www.w3.org\/TR\/WCAG21\/\" target=\"_blank\" rel=\"noopener\">Web Content Accessibility Guidelines (WCAG) 2.1AA (if applicable)<\/a>.<\/p>\n<h3>Security addendum<\/h3>\n<p>Sometimes customers may require further commitments regarding an organization\u2019s security posture. A Security Addendum usually includes:<\/p>\n<ul>\n<li>Administrative safeguards (incident response, change management, background checks, etc.)<\/li>\n<li>Technical safeguards (physical security, vulnerability scanning, network security, etc.)<\/li>\n<li>Organizational safeguards (security program, third-party assessments, disaster recovery, etc.)<\/li>\n<\/ul>\n<h3>Business Associate Addendum (BAA)<\/h3>\n<p>A BAA is a legally binding contract that protects personal health information (PHI). Required under <a href=\"\/regulations\/hippa-privacy\/\">HIPAA<\/a> when a Covered Entity uses a Business Associate to perform services involving PHI, it ensures that any party handling PHI adheres to specific standards to protect the data.<\/p>\n<h2>Ensure strong privacy contracting practices<\/h2>\n<p>Privacy contracting is not just about compliance; it&#8217;s about building and maintaining trust with your customers. By focusing on robust Privacy and Security Disclosures and well-crafted Policies and Addenda, you can establish a strong foundation for your privacy program.<\/p>\n<h4>Ready to refine your privacy contracting approach?<\/h4>\n<a href=\"https:\/\/trustarc.com\/products\/consent-consumer-rights\/trust-center\/drive-your-own-demo\/\" target=\"_blank\" rel=\"noreferrer\" class=\"btn\"><span>Discover Trust Center by TrustArc<\/span><\/a><p>Leverage a no-code solution that lets you unify, showcase, and streamline trust and safety information. You can create your own in days versus taking months to build one and make updates instantly. <a href=\"https:\/\/trustarc.com\/products\/consent-consumer-rights\/trust-center\/drive-your-own-demo\/\" target=\"_blank\" rel=\"noopener\">Take a tour of some of the features<\/a> to see how easy it is to create a modern unified Trust Center!<\/p>\n<h5>Continue mastering the privacy essentials by reviewing all the resources in the Privacy PowerUp series.<\/h5>\n\t\t\t\t\t\t\t\t\t<div class=\"question-box-multiple\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"question-box bg-dark\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/icon_Checklist_Small.svg\" class=\"attachment-full size-full\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>Privacy Contracting Infographic<\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<p>Save this infographic for a simple overview of the privacy contracting foundations.<\/p>\n<a href=\"\/resource\/foundations-privacy-contracting\/\" target=\"_blank\" rel=\"noreferrer\" class=\"cta\">View now<\/a>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"question-box bg-dark\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/02\/icon_High-Performance_Small.svg\" class=\"attachment-full size-full\" alt=\"\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<h4>PowerUp Your Privacy<\/h4>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<p>Watch all ten videos in the Privacy PowerUp series \u2013 designed to help professionals master the privacy essentials.<\/p>\n<a href=\"https:\/\/www.youtube.com\/playlist?list=PLr7xw10POYs4b4cpn1OPL0NN9BCURd5AZ\" target=\"_blank\" rel=\"noreferrer\" class=\"cta\">Watch now<\/a>\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<p>Read the next article in this series: #6 <em><a href=\"https:\/\/trustarc.com\/resource\/choice-consent-data-privacy\/\" target=\"_blank\" rel=\"noopener\">Choice and Consent: Key Strategies for Data Privacy<\/a>.<\/em><\/p>\n<p><strong>Read more from the Privacy PowerUp Series:<\/strong><\/p>\n<ol>\n<li><a href=\"https:\/\/trustarc.com\/resource\/getting-started-in-privacy\/\">Getting Started in Privacy<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/data-collection-minimization-retention-deletion-necessity\/\">Data Collection, Minimization, Retention, Deletion, and Necessity<\/a><\/li>\n<li><a href=\"\/resource\/building-data-inventory-mapping-ropa\/\">Building a Data Inventory, Mapping, and Records of Processing Activities (ROPA)<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/understanding-individual-rights\/\" target=\"_blank\" rel=\"noopener\">Understanding Data Subject Rights (Individual Rights) and Their Importance<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/\" target=\"_blank\" rel=\"noopener\">The Foundations of Privacy Contracting<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/choice-consent-data-privacy\/\" target=\"_blank\" rel=\"noopener\">Choice and Consent: Key Strategies for Data Privacy<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/international-data-transfers-onward-transfers\/\" target=\"_blank\" rel=\"noopener\">Managing the Complexities of International Data Transfers and Onward Transfers<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/emerging-technologies-privacy-ai-machine-learning\/\" target=\"_blank\" rel=\"noopener\">Emerging Technologies in Privacy: AI and Machine Learning<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/privacy-program-management-buy-in-governance-hierarchy\/\" target=\"_blank\" rel=\"noopener\">Privacy Program Management: Buy-In, Governance, and Hierarchy<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/managing-privacy-across-organization\/\" target=\"_blank\" rel=\"noopener\">Managing Privacy Across the Organization<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/assess-the-risk-before-it-hits\/\" target=\"_blank\" rel=\"noopener\">Assess the Risk Before it Hits<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/contracts-that-count-data-processing-agreement\/\" target=\"_blank\" rel=\"noopener\">Contracts that Count: Mastering the 10 Most Negotiated Provisions in a Data Processing Agreement<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/selling-sharing-personal-information\/\" target=\"_blank\" rel=\"noopener\">Selling and Sharing Personal Information<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/privacy-approved-vendor-management-program\/\" target=\"_blank\" rel=\"noopener\">Building a Privacy-Approved Vendor Management Program<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/tracking-technologies-adtech-privacy-minefield\/\" target=\"_blank\" rel=\"noopener\">Tracking Technologies: The Hidden Backbone of AdTech and the Looming Privacy Minefield<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/data-inventory-next-level-classification\/\" target=\"_blank\" rel=\"noopener\">Data Inventory: Next-Level Classification for Privacy Professionals<\/a><\/li>\n<li><a href=\"https:\/\/trustarc.com\/resource\/incident-incoming-now-what\/\" target=\"_blank\" rel=\"noopener\">Incident Incoming\u2013Now What?<\/a><\/li>\n<\/ol>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t<div class=\"right sm\">\n\t\t\t\t<div class=\"share-it\">\n\t\t\t\t\t<strong class=\"title block uppercase\">Follow us<\/strong>\n\t\t\t\t\t<div class=\"soc-list\">\n\t\t\t\t\t\t<a href=\"https:\/\/www.linkedin.com\/company\/trustarc\/\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/li-dark.svg\" alt=\"\" \/><\/a>\n\t\t\t\t\t\t<a href=\"\nhttps:\/\/twitter.com\/TrustArc\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/tw-dark.svg\" alt=\"\" \/><\/a>\n\t\t\t\t\t\t<a href=\"javascript:;\" id=\"copy-url\"><img decoding=\"async\" src=\"https:\/\/trustarc.com\/wp-content\/themes\/trustarc\/assets\/dist\/images\/link-dark.svg\" alt=\"\" \/><\/a>\n\t\t\t\t\t\t<span class=\"copied\" style=\"display:none;\">Link Copied!<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"key-topics\">\n\t\t\t\t\t\t<strong class=\"title block uppercase\">Key Topics<\/strong>\n\t\t\t\t\t\t<ul>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a href=\"https:\/\/trustarc.com\/topic-resource\/data-privacy\/\" class=\"badge\">Data Privacy<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<li><a href=\"https:\/\/trustarc.com\/topic-resource\/privacy-tips\/\" class=\"badge\">Privacy Tips<\/a><\/li>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"cta-area\">\n\t\t\t\t\t<p>Get the latest resources sent to your inbox<\/p>\n\t\t\t\t\t<a href=\"\/subscription-center\/\" class=\"cta\">Subscribe<\/a>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/section>\n\t","protected":false},"excerpt":{"rendered":"<p>In the fifth article of the Privacy PowerUp series, learn the foundations of privacy contracting, including privacy and security disclosures.<\/p>\n","protected":false},"featured_media":1251,"template":"","topic-resource":[55,52],"type-resource":[6],"class_list":["post-5301","resource","type-resource","status-publish","has-post-thumbnail","hentry","topic-resource-data-privacy","topic-resource-privacy-tips","type-resource-articles"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.4 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>The Foundations of Privacy Contracting | TrustArc<\/title>\n<meta name=\"description\" content=\"In the fifth article of the Privacy PowerUp series, learn the foundations of privacy contracting, including privacy and security disclosures.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/privacy-contracting-foundations\\\/\",\"url\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/privacy-contracting-foundations\\\/\",\"name\":\"The Foundations of Privacy Contracting | TrustArc\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/privacy-contracting-foundations\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/privacy-contracting-foundations\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/trustarc.com\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/res-feat-city-purple-test.png\",\"datePublished\":\"2024-10-03T12:01:00+00:00\",\"dateModified\":\"2025-09-24T13:51:33+00:00\",\"description\":\"In the fifth article of the Privacy PowerUp series, learn the foundations of privacy contracting, including privacy and security disclosures.\",\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/trustarc.com\\\/resource\\\/privacy-contracting-foundations\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/resource\\\/privacy-contracting-foundations\\\/#primaryimage\",\"url\":\"https:\\\/\\\/trustarc.com\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/res-feat-city-purple-test.png\",\"contentUrl\":\"https:\\\/\\\/trustarc.com\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/res-feat-city-purple-test.png\",\"width\":610,\"height\":152},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/trustarc.com\\\/#website\",\"url\":\"https:\\\/\\\/trustarc.com\\\/\",\"name\":\"TrustArc\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/trustarc.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"The Foundations of Privacy Contracting | TrustArc","description":"In the fifth article of the Privacy PowerUp series, learn the foundations of privacy contracting, including privacy and security disclosures.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/","url":"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/","name":"The Foundations of Privacy Contracting | TrustArc","isPartOf":{"@id":"https:\/\/trustarc.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/#primaryimage"},"image":{"@id":"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/#primaryimage"},"thumbnailUrl":"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/01\/res-feat-city-purple-test.png","datePublished":"2024-10-03T12:01:00+00:00","dateModified":"2025-09-24T13:51:33+00:00","description":"In the fifth article of the Privacy PowerUp series, learn the foundations of privacy contracting, including privacy and security disclosures.","inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/trustarc.com\/resource\/privacy-contracting-foundations\/#primaryimage","url":"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/01\/res-feat-city-purple-test.png","contentUrl":"https:\/\/trustarc.com\/wp-content\/uploads\/2024\/01\/res-feat-city-purple-test.png","width":610,"height":152},{"@type":"WebSite","@id":"https:\/\/trustarc.com\/#website","url":"https:\/\/trustarc.com\/","name":"TrustArc","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/trustarc.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/resource\/5301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/resource"}],"about":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/types\/resource"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/media\/1251"}],"wp:attachment":[{"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/media?parent=5301"}],"wp:term":[{"taxonomy":"topic-resource","embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/topic-resource?post=5301"},{"taxonomy":"type-resource","embeddable":true,"href":"https:\/\/trustarc.com\/wp-json\/wp\/v2\/type-resource?post=5301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}