OneTrust, which builds tools to help companies navigate data protection and privacy policies, raises $200M Series A led by Insight Partners at a $1.3B valuation
GDPR, and the newer California Consumer Privacy Act, have given a legal bite to ongoing developments in online privacy and data protection …
Context & Ripple Effects
This is the founding round of what became the defining privacy-compliance rollup of the GDPR era: OneTrust raises $200M at a $1.3B valuation just as GDPR enforcement and California's CCPA turn data-protection paperwork into an enterprise buying category. Insight Partners leads here and doubles down within months in the $210M Series B that doubled the valuation to $2.7B.
The arc matters because the coverage shows both directions: a peak Series C at $5.1B with a SoftBank-led extension, then a 2023 down round to $4.5B and, by late 2025, exploration of a sale to private equity. This 2019 round is where that cycle starts.
First-order effects
- OneTrust gains $200M to scale privacy-management tooling for companies facing GDPR obligations and the newly passed CCPA, with Insight Partners taking an early position it would extend in later rounds.
Second-order effects
- The round validates compliance software as a fundable category — Transcend follows within a year with its own $25M Series A for consumer-facing data-rights tools, widening the market beyond enterprise audit trails.
Third-order effects
- If the pattern holds, regulation-driven SaaS valuations track enforcement cycles rather than revenue alone: OneTrust climbs from $1.3B to $5.1B on GDPR/CCPA momentum, then slips to $4.5B and a potential PE exit once the regulatory tailwind normalizes.
The trend: Privacy regulation is minting a standalone compliance-software industry whose valuations rise and fall with the legal bite of laws like GDPR and the CCPA.