Risk & Compliance
Privacy & Data Protection
Privacy law asks for a simple thing that is hard in practice: know what personal data you hold, why you hold it and who can see it. We map your data, identify which laws apply, and build the notices, consent flows, retention rules and request handling to honor them. Your teams get clear procedures, and customers get promises you can actually keep.
Data spreads faster than policy
Personal information sits in spreadsheets, shared drives, marketing tools and old systems. Without a data map, no one can answer a customer asking what you hold about them.
Regulations such as GDPR, CCPA and HIPAA carry real obligations around consent, retention and breach reporting, and the penalties for ignoring them are growing.
What’s in scope
- Personal data discovery and mapping
- Applicability analysis for GDPR, CCPA, HIPAA and state laws
- Privacy notices, consent and cookie practices
- Data retention schedules and deletion procedures
- Subject access and deletion request workflow
- Data protection impact assessments
- Breach notification procedures
Method
How the work runs
- 1
Map
We trace where personal data enters, is stored, shared and deleted across systems and suppliers.
- 2
Interpret
We determine which laws apply to you and translate their duties into specific requirements.
- 3
Build
Notices, retention rules, request handling and training are written and put into operation.
- 4
Maintain
Regular reviews update the data map whenever you launch a product, vendor or process.
Does privacy law apply to us if we are in the United States?
Often yes. State laws, sector rules such as HIPAA and the reach of GDPR to non-EU companies mean many US organizations have duties. We assess applicability for you.
Can you act as our data protection officer?
We can provide advisory support. Whether a formal officer is required depends on your activities, and we explain the options.
Do you provide legal advice?
We deliver the operational and technical program. Legal interpretation should be confirmed with your own counsel.
What does a privacy program cost?
It depends on data volume and the laws involved, so it is scoped per engagement. Request a consultation to discuss.
More in Risk & Compliance
Related capabilities
- Compliance ReadinessGet audit-ready for SOC 2, ISO 27001, NIST CSF or CIS Controls with a plan you can follow.Learn more
- Virtual CISOSenior security leadership on a part-time basis, accountable for your program.Learn more
- Third-Party Risk ManagementSee, rate and reduce the risk that your vendors carry on your behalf.Learn more
Packaged options: IT Governance · Vulnerability Management · Identity & Access Management
Let’s build what’s next
Ready to start with Privacy & Data Protection?
Talk to our experts and discover how vinemobile can help you achieve your business goals.