Guided by more than 10 years of business ownership and privacy consulting experience, together with earlier information systems, compliance, and technology leadership roles, this data privacy, cybersecurity, and regulatory compliance expert specializes in privacy governance, information security compliance, audit readiness, risk management, and development of ethical and auditable data stewardship programs. Their expertise includes HIPAA, HITECH, GDPR, CCPA/CPRA, SOC 2, PIPEDA, state privacy laws, third-party risk management, breach response, privacy program design, information system assessments, policy development, regulatory scoping, cybersecurity compliance controls, and organizational privacy governance. This professional has conducted more than 120 privacy and security projects for over 90 clients across healthcare, technology, software, nonprofit, education, behavioral health, manufacturing, research, mergers and acquisitions, social services, and public-sector environments, assisting organizations in developing and maintaining comprehensive compliance management programs. Their work includes regulatory analysis, information system discovery and mapping, risk assessments, policy and procedure development, stakeholder interviews, training program implementation, third-party risk reporting, audit preparation, incident response support, breach notification activities, compliance documentation development, and support for regulatory reviews and investigations. Additional experience includes implementation of compliance programs for healthcare oversight agencies, educational institutions, medical billing operations, addiction treatment facilities, software organizations, and technology platforms requiring complex privacy and security compliance frameworks.

Complementing extensive consulting experience, this expert previously served in information systems and HIPAA compliance leadership roles involving development and implementation of HIPAA compliance programs, information governance policies, risk analyses, role-based compliance training, information system modernization initiatives, technology project leadership, and enterprise information management. Their background includes compliance readiness and regulatory implementation projects involving HIPAA, GDPR, SOC 2, HITRUST, and CCPA/CPRA requirements, including assessments and regulatory scoping exercises for healthcare technology platforms, digital asset management systems, post-merger information environments, software ecosystems, and complex data-processing operations. Regulatory and litigation-related experience includes expert consulting and litigation strategy support in matters involving consumer privacy laws, healthcare-related data tracking activities, HIPAA enforcement issues, regulatory investigations, and privacy compliance disputes. This professional has also served in privacy-policy advisory capacities involving consumer privacy legislation, data broker regulation initiatives, legislative testimony, and collaboration with governmental, academic, consumer advocacy, and industry stakeholders concerning privacy law development and ethical data stewardship practices. Educational qualifications include a Bachelor of Science degree in Human Development and a Bachelor of Arts degree in Psychology, together with a technical certification as an Emergency Medical Technician-Basic. Professional involvement includes membership, speaking, mentoring, continuing education, expert research participation, invited presentations, and policy-development activities within privacy, technology, bioscience, and nonprofit communities, as well as presentations addressing behavioral health privacy, cybersecurity, disaster recovery, cyber insurance, data ethics, and consumer privacy law.