Services

---

We start by working closely with our clients to learn their business inside and out. We can then provide strategic advice that is tailored for that specific client and their industry, while minimizing potential risks. 

Our team is experienced at working remotely, which helps reduce costs and also provides us the flexibility to engage with clients anywhere in the world. 

We are experienced in a broad range of privacy and data security areas, including the following laws and regulations: 

• The Gramm-Leach-Bliley Act of 1999 and related rules and regulations (GLBA) 
• The U.S. Health Insurance Portability and Accountability Act of 1996 (HIPAA), and the underlying Privacy Rule, Security Rule , and Breach Notification Rule
• The Health Information Technology for Economic and Clinical Health Act (HITECH)
• The California Consumer Privacy Act (CCPA) and The California Privacy Rights and Enforcement Act (CPRA)
• The General Data Protection Regulation (GDPR)
• The US-EU Privacy Shield Framework, Post-Schrems II and the various model Standard Contractual Clauses (SCCs)

Our extensive experience allows us to get up to speed quickly and understand your specific business needs. We can help you with:

• New and existing business organization and structural issues
• Developing, drafting and negotiating contracts with your clients 
• Developing vendor management programs 
• Software licensing agreements 
• Software as a Service (SaaS) Agreements

The legal and regulatory landscape is changing quickly. Our team is experienced working with companies to develop programs to comply with state, federal and international laws – including GLBA, HIPAA, GDPR, CCPA, CPRA, and other state privacy and security laws. 

Our team is experienced in helping companies with privacy, cybersecurity and compliance matters, including: 

• Developing, drafting and negotiating data protection agreements, business associate agreements, and other similar privacy-related agreements  
• Privacy impact assessments (PIAs) 
• Data protection impact assessments (DPIA) 
• Cyber governance
• Privacy and security assessments
• Risk assessments 
• Cross border data transfers 
• Preparing for client or regulatory audits of your company 
• Developing privacy and security policies, procedures and standards 
• Developing employee training programs in the areas of privacy, security and compliance 
• Developing record retention policies 
• Developing data breach preparedness and incident response programs 
• Data subject requests to access, modify or delete their personal information.