Privacy and personal data protection have become significant considerations for most organisations over the past decade, especially in the face of ever-evolving regulations (think General Data Protection Regulation (“GDPR”), and Bermuda’s Personal Information Protection Act (“PIPA”) and the way we use technology (think cloud computing, mobile devices and social media) which mean that more personal information is being collected, retained, and transferred than ever before.

There are many components that make up a well-run, mature Privacy operation which in turn, helps ensure that relevant personal information that is held or used by an organisation is safely and securely managed. But it is not just about doing the right thing, it is being able to demonstrate to stakeholders and regulators that you are continuously doing the right thing.

A common challenge for many organisations is attracting, retaining, and funding dedicated Privacy resource(s), who face a never ending and ever-changing set of priorities to manage. One option is to look to external support which can be tailored to scale up and down as required. It also enables fast access to Privacy subject matter projects (“SMPs”).

How we can help

Our combined KPMG member firm Privacy team has vast experience in supporting organsiations with their Privacy challenges. Some selected services that we offer include, but are not limited to:

Strategy and Framework Design

Build and manage a tailoured fit for purpose Privacy Strategy and framework using our tried and tested 12-principle approach.

Implementation

Support the implementation of your Privacy processes, framework and controls.

Assess

Independent assessment of your current state and comparison to your desired state.

Operate

Ongoing advice and assistance in operating and maintaining your Privacy program including incident management and remediation support in response to compliance orders, breaches and regulatory investigations.