Privacy and Data Protection
Home > Expertise

Privacy and Data Protection

Representative Engagements

The expansion of data protection and privacy laws at local, national and supranational levels imposes heavy compliance requirements on financial service companies. Both supervisors and the media have keyed in on data losses as a significant issue in addressing financial institution reform, raising the stakes of noncompliance, whether a company operates across borders or not.


Promontory’s Privacy and Data Protection practice thrives on a unique combination of regulatory, industry and consulting expertise, resulting in practical, workable solutions that will allow your institution to meet regulatory requirements. Our team helps clients manage the risks and regulations associated with handling data, including compliance with legal and regulatory obligations across multiple jurisdictions.  We understand the challenge of maximizing the value of data while protecting the rights of individuals, and we can provide practical and proactive solutions that align industry standards with the best interests of your business. 

Promontory’s experience combines an intimate understanding of the financial services industry with experience working on a broad range of privacy and data protection projects. Our areas of practice include:

  • Data Protection and Governance Strategy
  • Advisory and External Relations
  • International Personal Data Transfers
  • Service Providers and Vendor Management
  • Personal Data Security Breaches
  • Audit
  • Employment
  • Marketing/Social Media
  • Customized Training 

 

Representative Engagements

  • Promontory was engaged by a large international bank to provide support on the development and implementation of their Privacy & Data Protection Program. Work included developing the project plan for the program, running introductory briefing sessions for management, identifying and addressing "quick wins" for the client, and managing ad hoc issues as the program was implemented. Promontory worked closely with the bank’s project team and its external counsel.   
  • Promontory was engaged by a leading UK-headquartered international bank to undertake a review of regulatory restrictions on data transfers. Over 60 countries were in scope, and the work included consideration of banking secrecy, confidentiality and AML restrictions on data sharing, both within the group and with third parties. The deliverables included a handbook for use by local staff, covering the scope of typical processing activities for each business unit, providing guidance on compliance, and setting a risk rating for the jurisdiction.