OUR APPROACH
What we do, and where we start.
Every organization now runs on personal data, and everyone it deals with wants to know that data is in good hands. We work in four practice areas that together answer that question, and we offer them at three levels, depending on where you are today.
Four Practice Areas
01
02
03
04
Three Solutions
Foundational
Operational
Sustained
PRACTICE 03
Cross-Border Data and Global Compliance
One program that satisfies Philippine laws and the clients you serve.
Philippine companies have always worked across borders. A BPO in Pasig handles customer records for a retailer in California. A software team in Cebu builds for a client in Germany.
In each case personal data crosses a border, and more than one set of rules follows it. Under the Data Privacy Act, you stay accountable for personal data you send to someone else, here or abroad. Your foreign clients add their own layer: the GDPR in Europe, the UK GDPR, a growing list of US state privacy laws, and the contract terms that carry those laws to you.
The common response is to treat each one as a separate fire. We take the opposite approach. We map where your data goes, find what the different regimes have in common, and build one program that answers most of what any of them will ask.
Questionnaires get answered faster and more consistently. Contracts are negotiated from a position you understand. And when a prospective client asks how you protect their customers' data, you can show them.
WHAT WE DO
Data transfer mapping
What personal data leaves the Philippines, where it goes, and on what basis.
Client request workflows
Procedures for privacy requests your clients pass down to you.
Transfer contracts
Data processing, data sharing and outsourcing agreements, including clauses your foreign clients ask you to sign.
CBPR readiness
Preparation for the assessment; certification is granted by an accredited body.
Multi-jurisdiction alignment
The Data Privacy Act, GDPR, UK GDPR and US privacy laws turned into one set of controls.
Group privacy frameworks
One governance model across the Philippine entity and its affiliates.
Client audit readiness
Prepared answers and evidence for questionnaires, audits and proposals.
CALL US WHEN
-
A foreign client has sent an agreement or questionnaire you are unsure how to answer.
-
Your client's law has changed.
-
You use overseas cloud providers and have never reviewed the terms.
-
Each client audit feels like starting from zero.
-
You are bidding for work from the EU, the UK or the US.
Not applicable? Click on these other practice areas:
OUR SOLUTIONS
Wherever you are on your compliance journey, we meet you there.
We build your foundation, equip your leaders and in-house teams, and stay as the rules evolve.
HOW WE ENGAGE
Three ways we work with you.
Fixed-scope Projects & Deliverables
We may be engaged to deliver a defined policy, audit report, review, or other documents at a fixed fee.
Retained Advisory & DPO Support
Ongoing access to our team as your outsourced or co-sourced Data Protection Officer, with regular reviews and regulatory updates.