OUR PRACTICE AREAS
Governance for privacy, security, data transfers and AI governance.
Organizations run on data, and every client, regulator, and partner wants to know it's handled responsibly. We help you meet those expectations with advice that fits your size, your sector, and the markets you serve.
Four Practice Areas
01
02
03
04
Three Solutions
Foundational
Operational
Sustained
Grounded in the Philippine Data Privacy Act
Mapped to GDPR, US privacy laws, and international frameworks
Led by people who served the National Privacy Commission
OUR SOLUTIONS
Wherever you are on your compliance journey, we meet you there.
We build your foundation, equip your leaders and in-house teams, and stay as the rules evolve.
Foundational Compliance
For new companies, organizations that have not yet faced a regulator or a client audit, and those improving what they already have.
At this stage the goal is a sound base, built once and built properly. We find out what personal data you hold and why. We settle whether you must register with the NPC and complete the filing. We help you appoint a data protection officer who knows what the role involves. Then we write the documents the law expects, in words that match how your business operates.
You finish with a program that is small, complete and yours: people who know their part, documents that describe what you really do, and a first plan for the day something goes wrong.
Includes
-
NPC registration or exemption filing
-
DPO appointment and orientation
-
Data inventory
-
Privacy manual and privacy notices
-
Your first privacy impact assessments
-
A basic incident response plan
-
A starter AI use policy, if your staff use AI tools
HOW WE ENGAGE
Three ways we work with you.
Fixed-scope Projects & Deliverables
We may be engaged to deliver a defined policy, audit report, review, or other documents at a fixed fee.
Retained Advisory & DPO Support
Ongoing access to our team as your outsourced or co-sourced Data Protection Officer, with regular reviews and regulatory updates.
HOW WE WORK
The Engagement Framework
01 Discovery & Assessment
We begin with a structured review of your current data processing activities, existing policies, and compliance to establish a clear baseline.
03 Program Design & Implementation
We work alongside your legal, IT, and operations teams to design and implement privacy frameworks, policies, and controls within an observation period.
02 Gap Analysis & Prioritization
Our consultants identify compliance gaps, assess associated risk levels, and develop a prioritized remediation roadmap aligned with your organizational capacity.
04 Ongoing Advisory & Review
Regulatory landscapes evolve. We provide continuing advisory support to keep your program current as NPC guidance, technology, and business operations change.
