Services / Custom Engagements
Data Privacy Programs
Privacy programs that show what personal data you hold, why you hold it, who can access it, and how you protect it.
From $10,000Scoped to your obligations
Public agencies receive quotes structured to fit their procurement rules.
You own everything we produce.
Who this is for
Organizations usually call us about this when:
You operate under several state privacy laws or sector rules at once.
Your data flows include international transfers or many vendors.
Privacy work has outgrown a single project or retainer.
Overview
We build and strengthen privacy programs for organizations whose obligations go beyond a single package: multiple state privacy laws, sector rules like HIPAA or GLBA, international data, or complex vendor ecosystems. We scope the work to the laws that apply to you and the gaps that matter most.
What’s included
- Data mapping and records of processing
- Privacy impact assessments
- Privacy notices and internal policies
- Rights request processes
- Vendor privacy oversight
- Compliance with U.S. state privacy laws and sector rules
How it works
Scope
We identify the laws that apply and agree on priorities.
Build
We map data and write the policies, notices, and processes.
Operate
We train staff and set up ongoing review.
How it works for your organization
The same service, tailored to the obligations and realities of each sector.
Private Sector
Companies use custom privacy programs when they operate across many states or sectors.
- Multi-state privacy compliance
- Sector rules such as HIPAA and GLBA
- International data transfers
- Vendor and AI data sharing
Public Sector
Agencies use custom privacy programs to protect resident data across programs and systems.
- Resident data across departments
- Records and retention alignment
- Vendor data protection
- Privacy notices for public services
Nonprofits
Nonprofits use custom privacy programs when client, donor, and funder requirements overlap.
- Client and donor data
- Funder privacy requirements
- Health and youth data
- Programs sized for small teams
Frequently asked questions
How much does Data Privacy Programs cost?
Data Privacy Programs starts at $10,000. The final price depends on scope, and we confirm it in writing before any work begins.
How long does it take?
Most engagements take Scoped to your obligations, depending on scope and how quickly information is available.
What do we receive?
The engagement includes: data mapping and records of processing; privacy impact assessments; privacy notices and internal policies; rights request processes.
What if a deliverable doesn’t meet the agreed scope?
We revise it until it does, at no extra cost. And if we miss an agreed delivery date, we take 10% off that deliverable.
Who owns the deliverables?
You do. Everything we produce for you is yours to keep, use, and share.
Related Guides
- AI Regulation Map for Credit UnionsThe federal and state laws that apply when credit unions use AI in lending, fraud detection, member service, and marketing, and what each requires.
- AI Use Policy Guide for Behavioral Health CentersWhat a behavioral health center’s AI use policy must cover, from HIPAA and 42 CFR Part 2 to state laws restricting AI in therapy.
- AI Risk Register for Credit UnionsA sample register of common credit union AI uses, the data each one touches, its risk tier, the controls it needs, and who owns it.
Related services
Privacy Program Build
A complete privacy program: data map, policies, notices, rights requests, and vendor oversight.
Privacy Impact Assessment
A focused assessment of the privacy risks in one system or project, including AI systems, with specific safeguards.
Privacy Essentials
Monthly privacy support from our team: rights requests, vendor reviews, notice updates, and law changes.
Talk through your AI and privacy questions
Tell us what you're working on, and we'll reply within one business day.