Since becoming effective, GDPR compliance has proven difficult for organizations around the world. As a relatively new regulation there just aren't' enough real-world examples to understand regulator opinions on nuance situations.

That's why we leverage our experience to guide clients to solutions tried and tested in other organizations.

It's nearly impossible to be in the business of helping patients without coming across their Protected Health Information (PHI).

Our teams are intimately familiar permitted use and will help you set up the appropriate protocols to ensure appropriate handling and use of PHI.

Certification to data protection standards is an important step in demonstrating your ability to safeguard your customer’s data.

Our team has experience helping organizations adhere to the Common Security Framework, passing Insurance and Government vetting activities.

Is it a breach? Do we need to notify? Likely or unlikely? Is the frequency of occurrence in the Risk File substantiated? Are my risk assessments consistent?

As a foundational element of any Privacy system, it’s important to get Risk right. Translating regulation to real world applications is a bedrock TRCG capability.

It’s one thing to write a Privacy Policy. It’s another to design a practical, manageable, and operational system of controls that employees can navigate to safeguard the Personal Information they handle and store as they go through their daily work activities.

Our teams understand how to design and develop effective management systems and controls across industries and regulatory disciplines.