Building your business to towering heights requires foundations that run deep and strong.  Businesses that don’t master data protection, AI governance, and responsible data stewardship face increasing risk in the digital age.  At Tretower, we guide your business through a proven three step methodology built on Integrity (giving you the true picture of your risk), Clarity (de-risking your operations with simple, actionable roadmaps), and Trust (embedding long-term resilience). We turn complex privacy and data laws into your distinct competitive advantage.

About Us

Founded by Victoria Watts, an accomplished governance, data protection, and compliance leader who has over 10 years' senior leadership experience in the field, Tretower Consulting was created to provide clients with a consulting and coaching firm that gave people strategic insights, truly practical advice, commercially-aware guidance, and a holistic approach to data protection and compliance.  Specialising in highly regulated industries such as clinical research, we aim to provide solutions to our clients' biggest pain points.  What marks us as different from our competitors: 

• We help you identify and address the data protection compliance gaps that cause actual friction, instead of producing generic policies that look good on paper but fail under real-world scrutiny.  Too many consultants don't have real-life experience differentiating what is necessary from a 'nice to have', and they can't guide you on what the priorities are because they haven't had to live with those decisions.  We have, and that's the experience you can trust to add value.  

• We provide deep credibility as a Data Protection Officer for your organisation, to help you demonstrate your commitment and quality in data protection governance which earns stakeholder trust, but we never let the "tail wag the dog".  We understand that data protection isn't your business, it's ours.  We are here to enable you to achieve your goals; whether that is bringing a product to market, or reaching new customers, or simply doing what you do best.  

• We offer more than just pure data protection.  With our Founder's background in regulatory compliance, as well as the more technical aspects of technology, data governance, and privacy engineering, we are providing an end-to-end governance partner across legal, technical, and architectural requirements, which saves you from hiring multiple overlapping, but unaligned specialists.  Our holistic approach gives you consistency and efficiency to make a more streamlined compliance program with no gaps in coverage.    

The Tretower Way - A Proven Three Step Methodology

What do we cover

Laws

GDPR : ePrivacy : UK Data Protection Act : FOIA/EIA : HIPAA : US State & Federal Laws : PIPEDA : PIPL (CN) : National European laws : Schrems II : MR-001/3 : NIS2 : EU AI Act : & more

Standards

CR.GDPR : Europrivacy : ISO 27001 : ISO 27701 : ISO 42001 : EMA guideline on computerised systems and electronic data in clinical trials: 21 CFR Part 11 : eIDAS : & more

Activities

Data Protection Impact Assessments (DPIA) & Privacy Impact Assessments (PIA) : Contractual Drafting & Negotiations : Policy-making : eLearning & F2F training : Privacy engineering techniques & LINDDUN : Data mapping & ROPA : Breach simulation & tabletop exercises : DSAR advice : Cross-border data transfer strategies : Oversight, monitoring & accountability : KPIs : Master data management : Information classification : Business object modelling : AI risk categorisation : Diversity Panels : System Validation : Vendor assessments and audits : & more

Ready to build on strong foundations?