Data Privacy Compliance Services
We can help assess your company’s readiness to comply with California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), General Data Protection Regulation (GDPR) and other privacy requirements and help implement best practices for achieving broader privacy risk and compliance objectives across your enterprise. Our team of experienced consultants can review your company’s personal data collecting activities to build a data inventory, identify risks and gaps relative to the requirements of the privacy frameworks, and assist with building a practical action plan to address deficiencies.
CONNECT WITH US
Privacy regulation FAQs
Get answers to FAQs for the California Privacy Rights Act of 2020 (CPRA) and how it updates the CCPA.
Get answers to FAQs for all industries including whether CCPA applies to your company and how it compares to GDPR.
Get answers to FAQs for financial services firms including implications for hedge funds and private equity firms.
Get answers to FAQs including what data is in scope, breach notification requirements, and the impact of Brexit.
FAQs to help you navigate the complexities of Brazil's LGPD compliance regulation and ensure compliance.
In response to the rapid uptick in breaches involving personal data, the public’s expectations of privacy are evolving. More privacy regulations are coming into effect at the local, national, international, and sectoral levels. In addition to the EU’s GDPR, various other privacy laws were passed including the CCPA, CPRA, Brazil’s General Data Privacy Law, and India’s Personal Data Protection Bill. As these privacy regulations come into effect, companies are quickly recognizing that effective privacy management is not just a key compliance activity but also a key factor in business enablement in the digital economy.
We can assist with assessing your company's compliance with relevant privacy regulations. Through the implementation of best practices, we can help your company achieve broader privacy risk and compliance objectives across your enterprise. Our team of experienced consultants can review your company’s personal data collecting activities to build a data inventory, identify risks and gaps, provide recommendations on addressing those gaps, and support the implementation of your privacy requirements.
Our service includes:
- Personal data discovery exercise
- Personal data risk assessment
- Data processor/collector (vendor) risk assessments
- Review of data and cybersecurity governance program
- Review of incident response procedures and published privacy notice(s)
- Review or development of a Record of Processing activity
- Data processor inventory
- Privacy training (in-person or online)
- Readiness assessment for portfolio companies
- Privacy program and governance development assistance
- Data processor (vendor) risk assessments
We can assist with assessing your company’s compliance with the EU's General Data Protection Regulation ("GDPR") requirements. The regulation, which entered into force on 25 May 2018, applies to EU-established organisations that process personal data, as well as organizations located outside of the EU that process EU residents’ personal data in connection with the offering of goods and services or that monitor the behaviour of EU residents.
We can assess your company’s compliance with CCPA and CPRA requirements and provide recommendations to address deficiencies.
- Health Insurance Portability and Accountability Act (HIPAA)
- Brazil's Lei Geral de Proteção de Dados (LGPD)
- Gramm-Leach-Bliley Act (GLBA)
- State-specific breach notification laws
- National privacy laws around the globe
Our web-based training course provides businesses of all sizes with an effective and comprehensive review of GDPR requirements. The course is designed to ensure your staff gain a broad understanding of their role in meeting GDPR requirements.
We offer two types of GDPR training: one designed for all business, and one designed for private equity/venture capital/credit fund managers.
We can help determine if your vendors are compliant with GDPR requirements, working towards compliance, or have not considered the implications of GDPR. Our vendor management platform includes a GDPR-specific due diligence questionnaire that can be administered as a standalone questionnaire at a reduced rate, or as part of the standard ACA Aponix vendor DDQ.
Regulatory Horizon 2022 | Prepare for the Challenges of Tomorrow
Financial services firms face a bumpy ride in 2022, as the tectonic plates of regulatory change shift again within a rapidly evolving operating environment. Download our complimentary whitepaper to identify your GRC gaps before the regulator does:
- AML and Financial Crime
- eComms Surveillance
- Managed Services
Personal Information Protection Law (PIPL) FAQs
The People’s Republic of China (PRC) has passed robust data privacy regulation that governs data security and personal information processing. This FAQ addresses questions firms may have about the nature of this legislation and its requirements.
China Passes Data Privacy Law That Affects Chinese and Foreign Companies
The Personal Information Protection Law of the People's Republic of China is scheduled to go into effect on November 1, 2021. This new law affects all companies and other entities, both inside and outside of China, engaged with personal information about individuals residing in China.
ACA’s Spring 2021 Virtual Conference: Key Takeaways and Trends
ACA’s Spring 2021 Virtual Conference was an opportunity for the regulatory compliance, performance, and cybersecurity community to come together and discuss the many changes of the past year and what the future of GRC looks like moving forward.
- GIPS Standards
Virginia Senate Passes Consumer Data Protection Act
The Virginia Senate has unanimously passed the Virginia Consumer Data Protection Act (VCDPA) and once approved by the governor, the law is set to go into effect on January 1, 2023. This data privacy law would grant privacy rights and consumer protection to Virginia residents. Learn how to prepare for these new protections.
California Approves CPRA, Which Amends CCPA
Learn more about the California Privacy Rights Act (CPRA), which amends the existing California Consumer Privacy Act (CCPA).
ACA Group Appoints Patrick Olson as Chief Executive Officer
17-year BlackRock veteran with blend of industry expertise, client relationships and global operating experience, will help drive growth and innovation.
Celebrating Asian Pacific American Heritage Month at ACA Group
ACA is committed to nurturing an inclusive workplace. We share some of exciting ways the company celebrates Asian Pacific American Heritage Month (APAHM).
ACA Group Wins Big at 2023 HFM European Services Awards
ACA's client-focused model and technology-enabled solutions continue to set them apart.