Advisory Compliance

As the cyber threat landscape rapidly evolves, data privacy and security laws are enacted and amended with increasing frequency at the state, federal, international, and industry levels. This climate underscores the critical importance for organizations across all industry sectors to implement strategies that improve their overall compliance posture in this emerging patchwork of privacy regulations and to mitigate the impact of data privacy and security incidents on their operations, reputation, and financial bottom line.

Our Advisory Compliance practice provides comprehensive counsel and advice on pre-incident and proactive data privacy and security compliance – assisting organizations as they navigate the swiftly evolving legal landscape governing the collection, use, storage, transfer, and protection of sensitive or protected information. Working hand-in-hand with organizations' internal stakeholders and external technical consultants, we build and operationalize tailored data privacy and security solutions that not only strengthen their compliance posture with respect to a myriad of legal and regulatory requirements, but also to mitigate risk to its own data and data held or processed on behalf of others.

We have significant experience advising organizations from all industry sectors, including highly regulated industries such as healthcare and life sciences; financial services, including insurance; education; government; retail/e-commerce; and technology. We are actively involved with the International Association of Privacy Professionals (IAPP), with many team members holding certifications such as the Certified Information Privacy Professional (CIPP), Certified Information Privacy Manager (CIPM), and Artificial Intelligence Governance Professional (AIGP). We actively and continuously monitor active and pending state, federal, and international legislative, as well as industry-specific regulations and guidance, so that we are able to effectively advise organizations in understanding these laws and regulations, and if necessary, help to identify, develop, and implement fully-tailored data privacy compliance programs.

Our services and solutions include:

• Incident Response Plan (IRP) Development;
• Cyber Incident Response Tabletop Exercises;
• Data Privacy Compliance Program Development;
• Health Insurance Portability and Accountability Act (HIPAA) Compliance;
• Artificial Intelligence (AI) Process and Policy Development;
• Vendor Contract Review/Negotiation and Development of Vendor Management Programs;
• Data Transfer and Processing Agreement Development;
• Security and Risk Assessments;
• Data and Network Infrastructure Mapping;
• Employee, Executive, and Board Data Privacy and Security Training;
• Website Marketing Information, Privacy Policy, and Terms-of-Use Development;
• Document Retention/Destruction, Business Continuity, and Data Recovery Plan Development; and
• M&A Due Diligence.