Tom Considine & Associates is a Service Disabled Veteran Owned Small Business (SDVOSB) and is certified by the IAPP as a Certified Information Privacy Professional/CIPP/US and Government (CIPP/G) providing organization data security management.We have been a partners to both government agencies, public and private organizations to assist in complying with privacy and data protection mandates. This work encompasses internal and external compliance auditing, regulatory familiarity, Information Protection Manager training, annual employee training, third party due diligence reporting and the destruction of digital and hard copy data. Tom Considine & Associates develops security policies and programs compliant with NIST 800 & ISO 27000 series, HIPAA.

Chief Privacy and Compliance Officer | Expert in Data Privacy Laws and Regulations | Advocate for Ethical Data Use.Dynamic and seasoned Chief Privacy and Compliance Officer with over 11 years of experience in leading privacy and compliance initiatives in government and private sector compliance. Proven track record in developing and implementing robust privacy policies, ensuring regulatory compliance, and fostering a culture of data protection within organizations. Passionate about leveraging my expertise to drive ethical data practices and safeguard sensitive information. Spearhead the development and implementation of comprehensive data protection policies and procedures in compliance with GDPR, HIPAA, CCPA, and other relevant regulations.Conduct regular risk assessments and audits to identify vulnerabilities and implement effective mitigation strategies.Lead cross-functional teams in integrating privacy considerations into business operations, ensuring organization-wide adherence to data privacy standards.Manage incident response and breach management processes, including timely reporting and communication with regulatory bodies and affected parties.Drive employee training programs focused on privacy and security awareness, reinforcing a culture of data responsibility.Stay abreast of emerging privacy laws and technological advancements, continually adapting and enhancing the organization's privacy frameworks.Engage with stakeholders, providing clear and transparent communication on privacy practices and compliance achievements.