Data Governance Strategy

Program Assessment. Assess privacy program function and operations, including policy and process development, resource allocation, leadership and board reporting, external engagement, and coordination with security, risk and audit functions. Develop privacy and data governance strategy.

Trust Center Development. Develop or revise Trust Center objectives and wireframe; identify resources and tools to meet company and customer objectives; assist with site and resource development.

AI Strategy and Governance. Structure AI governance program aligned with product strategy and evolving regulatory environment.

Operations

Interim Privacy Officer. Act as privacy/data protection officer for a defined period or while performing program evaluation.

Security and Privacy Risk Reporting and Mitigation. Support executive and board reporting, including privacy and security compliance and risk management. Advise on risk mitigation strategy and prioritization.

System and Vendor Assessment. Design and implement privacy impact assessments, system and vendor reviews, and privacy risk management framework.

Crisis Management and Readiness. Augment security crisis management and associated internal, customer and regulatory communications. Review, enhance incident response and vulnerability management policies, processes and communications.

Policy and Regulatory

Compliance with Evolving Legal Requirements. Analyze evolving legal and regulatory requirements relevant to a client's business and counsel on adopting appropriate compliance measures.

Works Council Engagement. Advise concerning European Works Council engagement on data protection issues.

Policy Development and Implementation. Review, refine and implement policies and practices related to data collection; primary and secondary data uses; web site, employee and services privacy; acceptable use; information classification and handling; data retention; breach disclosure; and incident management. 

Contract Review. Review cloud service terms, data privacy addenda, supplier/partner privacy and security requirements, and service security standards.