Charles Kracy Email & Phone Number

I started my career with Trellis in 1993 when it was doing business as TGSLC. I began in collections, but the majority of my time has been spent in policy and compliance. Most recently, I managed a portion of the borrower due process, the privacy regime, vendor management/risk assessments and fraud investigations. External circumstances resulted in staff reductions that included my position and I am therefore seeking new opportunities to continue my career in compliance, however, not necessarily in the student loan industry.I have experience in creating policy, procedural and work instruction documents for a variety of processes, including privacy, third-party vendor management and the oversight of customer administrative hearings. I have the flexibility to manage a variety of processes simultaneously. I have the ability to communicate effectively both verbally and in writing with public speaking experience. I have created, produced and provided effective training of privacy legislation, including but not limited to the Gramm-Leach-Bliley Act, the Health Insurance Protection and Portability Act and other state and federal privacy legislation, as well as other compliance related topics.The following is a list of recent accomplishments and work projects produced in this role:* Created 'Data Breach Playbook' for Trellis to ensure compliance with all legal and regulatory requirements related to unauthorized disclosures of information.* Modernized Trellis' privacy regime via the creation of policy, procedural, and work instruction documents.* Wrote numerous articles for corporate intranet related to privacy.* Participated in Federal and internal audits of privacy program.* Disseminated compliance advisories to all business units relating to the passage of numerous state comprehensive privacy laws, including the CCPA & CPRA, the CPA, the VCDPA, the UCPA and the CDPA.* Conducted annual 'Data Privacy Interviews' as oversight of privacy regime.* Analyzed privacy events, notification requirements, and recommended mitigation efforts.* Analyzed privacy events trends, & created reporting dashboards management and the board. * Assessed privacy and security risk of products, services, and vendors.* Maintained all privacy-related documentation, & managed all privacy-related functions.* Spearheaded establishment of Third-Party Vendor Management risk assessment program for Trellis, including training.* Acted as the Records coordinator for Corporate Compliance, maintaining the schedule and ensuring that retention requirements are met.