At Tretower we specialise in providing much needed expertise interpreting and mastering the implementation of complex privacy laws. Whether your company is facing European laws such as GDPR, US laws such as the Department of Justice Final Rule, or one of the myriad of other regional and national laws globally, we can help you build a defensible compliance posture.
Navigating evolving European digital regulations and deploying emerging tech safely are some of the biggest challenges organisations face. At Tretower, we believe in looking holistically and realistically at all your data compliance risks and prioritising according to your commercial needs and specific risks to the individuals your business interacts with.
What do we cover
Laws
GDPR : ePrivacy : UK Data Protection Act : FOIA/EIA : HIPAA : US State & Federal Laws : PIPEDA : PIPL (CN) : National European laws : Schrems II : MR-001/3 : NIS2 : EU AI Act : & more
Standards
CR.GDPR : Europrivacy : ISO 27001 : ISO 27701 : ISO 42001 : EMA guideline on computerised systems and electronic data in clinical trials: 21 CFR Part 11 : eIDAS : & more
Activities
Data Protection Impact Assessments (DPIA) & Privacy Impact Assessments (PIA) : Contractual drafting & negotiations : Policy-making : eLearning & F2F training : Privacy engineering techniques & LINDDUN : Data mapping & ROPA : Breach simulation & tabletop exercises : DSAR advice : Cross-border data transfer strategies : Oversight, monitoring & accountability : KPIs : Master data management : Information classification : Business object modelling : AI risk categorisation : Diversity panels : System validation : Vendor assessments and audits : & more
We will review your current position, listen carefully to your commercial and operational reality, and assess you fairly against privacy laws to which you are subject. We will give you a detailed gap analysis that highlights the most important issues, giving you a diagnostic that is tailored to you and your business.
A strategic privacy or compliance project reduces friction and burden on the business, it doesn’t cause it. Based on years of experience, we can help you identify key stakeholders and decision-makers, sequence the project according to both risk and opportunities, and advise you on techniques for getting your project approved, implemented in a timely fashion, and scaled.
If you need support with the implementation of your privacy project, you can outsource tasks like data mapping or policy/document writing to us in a fixed fee arrangement. We can also help you set up and configure your privacy management software, such as OneTrust. Operationalise your project more quickly with extra resource on demand.
We can provide ongoing support, including fractional data protection officer as a service (DPOaaS). For a retainer, we can stay as close as you want us. We provide ongoing oversight and monitoring services, staff training, incident response simulations, and third-party vendor vetting to maintain your reputational fortress. By using our long-term services, you will build the trust of customers who see your visible commitment to privacy and good governance.
Boards are pushing for greater AI adoption, wanting to see commercial benefits now. That is putting real pressure on compliance teams who are being asked to grapple with complex issues faster than ever and without the experience required. At Tretower we can guide you through developing responsible and ethical AI governance frameworks at speed, from AI categorisation, risk assessment, development and testing, to ongoing monitoring.
Data governance is a foundational piece of work that often gets overlooked, but you really can’t achieve good data protection or AI efficiencies without classification, labelling, good master data management, or sensible data stewardship principles embedded into your operations. At Tretower, we can help you unlock the value of your data and drive efficiency-led growth, while maintaining privacy and security.