top of page


Consumer Data Privacy Solutions

Consumer data privacy is a critical concern for all businesses, regardless of size.  Proper handling of Personally Identifiable Information (PII) and Sensitive Information (SI) are essential to running a successful business.  It will not only keep your business compliant, but is a key factor in keeping customers, partners, and employees content. 


Data privacy is an umbrella term that encompasses many different topics, all of which play a role in protecting data and ensuring compliance with the various regulations currently in effect -- including GDPR, ePrivacy Directive, CCPA/CPRA, COPPA, CalOPPA, CPA, CTDPA, VCDPA, and UCPA.  

Consumer data privacy regulations are not exclusive of one another, and with a few exceptions, enshrine the same or similar rights to individuals.  That is the good news. The bad news is that the number of regulations continues to grow, the pace is quickening, and the penalties for non-compliance can be steep.  Ever-evolving state, federal, and global regulations are making it difficult for businesses to keep up and companies are increasingly reaching out for assistance.  This is where Waterpointe Consulting can help. We are skilled at designing, building, reworking, and managing data privacy programs based on regulatory requirements and industry best practices.

Our service delivery looks like this:

Phase One - Audit

Auditing is a necessary first step to understand exactly where you are in your data privacy journey.  Our data privacy experts will audit the following areas:

1. Data Inventory

2. Specific regulatory requirements

3. Current data privacy policies and procedures

4. Privacy notices

5. Third-party data processors and data sharing contracts

6. Security controls

7. Incident and data breach readiness

Once the audit is complete, we provide a full accounting of all audit results, provide you with recommendations on next steps, and provide a roadmap and timeline for the agreed upon changes.

Phase Two - Build

The Build Phase is where remediation tasks and enhancements get implemented.  This is generally a combination of notice, policy and procedure creation, implementation of technical controls, and documentation.

Phase Three - Train

The Train Phase is all about ensuring your staff is trained on applicable data privacy regulations (global, federal, state), the newly implemented processes and procedures, privacy and security best practices, and other topics specific to how your business operates.  We can also produce privacy and security awareness materials for display in your office or on your website.

Contact us today for a free data privacy consultation.  CONTACT US

bottom of page