Gerald Spada Email & Phone Number

Nashville, Tn, Us

Nashville, Tn, Us

Nashville, Tn, Us

San Diego, Ca, Us

Led company-wide effort to establish second-line privacy compliance framework at the largest independent broker-dealer in the United States. Re-aligned program to implement the framework, oversaw strategic evolution of privacy governance, and developed comprehensive solutions to privacy issues. • Established governance committee to provide an appropriate mechanism to escalate privacy issues.• Created and implemented control procedures.• Fostered innovative practical and technological solutions to achieve privacy compliance and business goals.• Advocated for and implemented cross-departmental and enterprise-wide California Consumer Privacy Act program including but not limited to its organization, budget, staffing, technological/backend workflows, communications, and training.

Worldwide, Oo

Reviewed and remediated strategic privacy issues as a consultant to Fortune 500 clients. Enhanced global privacy compliance program governance, risk management, and oversight. • Led consulting engagements.• Assessed privacy programs of global Silicon Valley client, media company, consumer and industrial products manufacturer, and financial services firm against regulatory obligations and industry standards. • Analyzed their unique environments and charted strategic framework for program design, build, and enhancement.• Conducted internal Deloitte multi-day training for firm members on global privacy laws, regulations, and program considerations.

Boston, Massachusetts, Us

Built and managed a global privacy compliance program covering 31 countries and 30,000 employees at one of the world’s largest investment servicing and investment management companies. • Founded privacy oversight committee to provide an appropriate mechanism to escalate privacy issues.• Instituted formal control procedures enterprise-wide including but not limited to those concerning data subject access requests, cross-border data transfers, and data events.• Monitored global regulatory developments and trends to anticipate and minimize new areas of risk. • Developed inventory of regulatory obligations, policy document and related controls, analysis of risk and proper risk-response, and collaboration with business and legal/risk/ audit control functions. • Developed joint privacy/information security training, met regulatory expectations, achieved universal compliance, and reduced business burden. • Instituted security schedule for vendors with specific personal data protection requirements. • Convinced senior executives to allocate significant funding timely to enhance vendor management, accelerate deployment of encryption, and address GDPR requirements. • Interacted directly with federal and state regulators.• Established and managed global teams in a matrixed environment.

Zurich, Ch

Partnered with first company chief privacy officer, conducted comprehensive privacy/data protection posture assessment, and minimized regulatory and brand risk at this global wealth manager. Directed national network of privacy, data protection, recruitment, and asset recovery outside counsel. Revised short-term non-disclosure agreements, master services agreements, and data protection/security schedules. Lowered costs for financial advisor recruitment/departure and collection efforts. Advised domestic and international affiliates on off-shoring, CAN-SPAM, document retention/retrieval, systems application development/modification, and regulatory initiatives.

Trial practice with substantive experience in disputes over personal data rights.

Juris Doctor (J.D.)

B.A., International Studies