Compliance for Privacy and Security

Our team of experts provides data protection and security guidance when and where you need it most.

Comprehensive strategies

We offer practical guidance in the development and implementation of global privacy and security programs to address legal, regulatory, and business requirements, including those related to GDPR, CCPA, DSARS, and PIAs.

General Data Protection Regulation (GDPR)

Organizations need to ensure they have a defensible and proactive strategy for complying with GDPR requirements, including short- and long-term plans for the management of personal data (e.g., records retention, classification, protection, and disposition), handling of subject access requests, framework for cross-border eDiscovery, governance, and tracking and logging of relevant processing activities. Let us help you assess your current program and support your efforts toward achieving greater compliance.

Learn more

California Consumer Privacy Act (CCPA)

Many of our clients doing business in California are subject to the California Consumer Privacy Act and are struggling with how best to comply. We can assist you with developing a defensible process for complying with the CCPA.

Data Subject Access Requests (DSARs)

The most common challenge is responding to requests in the timeframe permitted. This requires an operating model that supports proactive scoping and use of technology to cull non-responsive data. Our team of attorneys, privacy specialists, and technologists have developed a workflow that is defensible, scalable, proportional and cost-effective.

Privacy Impact Assessments (PIAs)

These assessments measure the potential and ongoing privacy risk of systems and the data flows surrounding them, including the collection, use, and disclosure of personal data. We help organizations not only perform required PIAs regularly to identify and mitigate risk, but also implement privacy procedures as a key component of your data management program.

Contact us