# Defining Your Privacy Migration Priorities

Contact each OneTrust stakeholder across the business to understand their use case requirements and priorities. Use this page as a guide.

## Data Subject Rights Management (rank most important to least important)

- Replace DSAR processing
- Replicate workflows (Employee Access Workflow, Consumer Deletion Workflow, etc.)
- Migrate historical DSRs for record-keeping purposes
- Replicate integrations with third-party apps and internal systems

## Data Inventory and Mapping (rank most important to least important)

- Perform system discovery and data classification for all third-party SaaS apps
- Run data discovery and perform risk classification for internal data systems
- Monitor for high risk activities such as sensitive data storage and AI sub-processing

## Cookie Consent Management (rank most important to least important)

- Import OneTrust cookie categorization
- Remove OneTrust Cookie Consent Management code and replace banner
- Maintain a historical record of past consent preference transactions
- Customize consent banner to ensure it adheres to brand guidelines

## Privacy Assessments (rank most important to least important)

- Migrate historical assessments results
- Replicate custom assessments templates
- Create/issue a DPIA assessment or RoPA
- Run a third-party vendor risk assessment

## Other (rank most important to least important)

- Data governance
- IT risk management
- Ethics and compliance management

[continue reading](/content/resources/interactive/migrating-from-onetrust-to-datagrail/building-a-business-case/index.html)