TrustArc’s Expert Privacy Consulting Team

He is an active speaker, blogger and the author of the recently released “CISO REDEFINED,” focused on the globalization and digital transformation of business, and the protection and privacy of personal and company consequential data, domestic and global.

Over the past 10 years, Dama has advised and worked with companies on diverse topics such as employee privacy, health privacy, cross-border data transfer mechanisms, risk assessments, privacy by design, and information security best practices. She has helped multiple organizations comply with a range of laws and standards including GDPR, CCPA, LGPD, HIPAA, Privacy Shield, as well as ISO27001/2, ISO 9001, CIS20, etc.

Dama brings a blend of business, technology and privacy expertise to her clients. She holds an MBA and an MS degree. She is a CIPP/E certified privacy specialist as well as a PRINCE2 certified Project Manager. She has worked with companies of all sizes, from startups to Fortune 500, across a wide range of industries (Software and Services, Electronics, Health Care, Government, Education; and Hospitality).

A regular presenter on Global Privacy Strategy and Analytics in Investigation Response, Janalyn is a testifying Expert Witness in the Fourth Judicial District Court, and has spoken extensively in meetings with DOJ, SEC, HHS, FBI and contentious opposing parties to fully articulate her clients’ defensible practices.

Before joining TrustArc, Janalyn was a Managing Director at Navigant Consulting, a Principal at Deloitte, and a Vice President at Xerox Corporation. Her certifications include: Information Privacy Manager Certificate (CIPM) from the International Association of Privacy Professionals (IAPP), Certified Information Systems Security Professional (CISSP) from (ISC)2, and Security+ and Network+ from CompTIA.

She has held a variety of IT/Data Protection leadership positions, including serving as AVP Global Public Policy/Privacy for AT&T; VP Corporate Information Security for Wachovia; and Information Security Officer for SACU. She received her Master’s degree from Vanderbilt University and holds four privacy and security certifications: CIPP/US, CIPP/E, CISM, and CISSP.

Prior to joining TrustArc, Betty worked extensively with healthcare privacy for her former client, the U.S. Department of Health & Human Services. Betty has also routinely worked with data privacy for the financial services industry. While working across these industries, she provided guidance regarding data breaches, risk assessments, implementing data protection measures and cybersecurity controls, and protecting the privacy rights of individuals. Betty’s accomplishments include partnering with organizations ranging from sole proprietors to Fortune 100 companies to resolve defects and compliance gaps in their privacy programs.

Michael has specifically helped clients understand privacy compliance and prepare their operations to support CCPA, GDPR, HIPAA, IPEDA, and POPIA. He is also a former PCI-QSA (Qualified Security Assessor).

She has worked in the healthcare industry as Chief Privacy and Security Officer and In-house Counsel for a multi-state behavioral healthcare provider. She was responsible for HIPAA/HITECH privacy and security strategy and program development/implementation including enterprise-wide data governance framework, policies and procedures, workforce training and awareness programs, complaint and breach investigation and notification processes, business associate and vendor management processes and risk audit/ risk management processes. Her experience also includes HiTRUST Scoping, as well as FERPA, RedFlag, GLBA, FINRA assessments. She also served as the organization’s in-house legal counsel.

Since 2012, Pat has been consulting in the areas of risk assurance and risk advisory services, and advising clients building compliant and accountable Data Privacy and Cybersecurity programs. Typical projects include risk analysis and gap assessment procedures, gap remediation and on-going consultancy services to ensure required implementation. She also worked with companies defining and building their data governance frameworks and supporting team development responsibilities for data privacy and security programs.

A strong focus of her consultancy services has been HIPAA/HITECH, GDPR and other international data privacy regulations as well as CCPA compliance and implementation. Clients include healthcare providers and insurers, pharma, medical devices and healthcare solutions companies, business associates of various types of service providers, cloud services providers, employment services providers, international professional credentialing organizations, financial services providers and real estate investment companies.

Ralph is a trusted advisor on Global Privacy and Security compliance, practices and management for the past two decades. He believes good information governance adds business value to achieve business objectives and return on investment. His role includes acting as a senior level “translator” between IT, business and compliance professionals, thought leadership, business development, partnerships and product development. His experience includes strategic Privacy Management and GDPR adoption programs, advisory services and assurance delivery in global multinational environments.

Prior to that, he has been an experienced Product and Services business development lead, Principal Consultant and Manager, delivering training, consultancy and audit of data protection, business continuity and information security – Management of consultancy and audit teams across multiple topics, responding to tenders and delivering solutions proposals.

He has worked in a wide variety of industry sectors including the with a focus on Defense, Public Sector, Technology, Pharma and Financial Services, representing both multinational corporations and boutique specialist consultancies.

He continues to be a hands-on practitioner, combining business level consultancy with training and technical experience across ISO/IEC 27001, BS 10012, ISO 9001 and ISO 22301 standards through to certification. He was responsible for the first global joint 27001/25999 management system to be certified and sits on the international and British committees responsible for ISO 27001, BS 10012 and ISO 27701.

With a focus upon business processes and the protection of information, and an ethos of management assurance, risk management and knowledge transfer he continues to ensure effective protection of assets appropriate to the business needs of the client.