Privacy Services

Lost or stolen personal information can be devastating to an individual, but the loss or misuse of that information can easily cost your company thousands, if not millions of dollars in fines, penalties and legal fees. Risks to your company can also include damage to your company’s brand, reputation and business relationships or charges of unfair and deceptive business practices.
According to a complex maze of federal and state laws, you are responsible for the security and privacy of this personal and sensitive information. Your responsibility also extends to any third parties that manage or store personal information on your behalf, including outsourced payroll, benefits and medical or professional service providers. Examples of privacy and information security regulations include:
• The Gramm-Leach-Bliley Act
• HIPAA - ARRA / HITECH Act
• FACTA Red Flag Rules
• FACTA Disposal Rules
• Individual States – Breach Notification and Safeguard Requirements
• International Data Transfer Rules

The Lyndon Group specializes in privacy and information security compliance and breach mitigation for small to mid-size organizations. Our risk-based approach includes understanding your company’s business environment; identifying and prioritizing potential risks; and development of a cost-effective, tailored privacy program to ensure the privacy rights and trust of your customers. Services include:

Privacy Leadership Services

Every organization that collects, manages and shares personal information is responsible for securing and properly managing that information, but many companies aren’t aware of or don’t understand the risks to their business.

Small to mid-size companies may face the highest risks associated with privacy and information security. Large corporations are able to hire full-time compliance and legal staff to address their risks, but it can be difficult for a smaller organization to afford or justify a full-time privacy employee.

Lyndon Group works with our clients to understand their unique requirements, identify risks, and provide recommendations to implement a comprehensive privacy and information security program. Once a program is in place, a Lyndon Group privacy expert will monitor and manage privacy compliance and risk on a part-time or as-needed basis.

Risk Analysis and Mitigation

The first step in protecting your personally sensitive information is to understand the information that may be at risk. While most privacy assessments begin with identifying risks associated with access and controls, Lyndon Group takes a different approach. We begin by conducting an in-depth inventory to identify personal information that is collected, the purpose of that information, the source of the information and how the information is managed, shared and stored.

The next step is to understand and prioritize the risks to your business including applicable laws, privacy and security gaps, employee education and awareness, and incident response procedures.

This approach provides privacy guidance and a framework that will help an organization to protect its personally sensitive information, comply with applicable regulations and maintain the trust of its customers.

Policy Review and Development

Lyndon Group will evaluate existing privacy policies and identify potential risks or develop a customized privacy policy that will establish best practices and comply with applicable privacy laws and regulations.

Employee Education and Awareness

Lyndon Group can provide cost-effective training and awareness solutions to meet the specific needs of your organization. These solutions have been developed by leading privacy and information security experts and are used by a significant number of major corporations and organizations.

Ongoing Compliance Reviews

Lyndon Group provides ongoing reviews to ensure that your privacy policies and processes meet your current business needs and compliance requirements.

Incident Response

Over 46 states have breach notification and safeguard requirements and the first federal breach notification legislation was recently passed for the healthcare industry under the American Recovery and Reinvestment Act of 2009 (ARRA).

As part of a comprehensive privacy program or as a stand-alone engagement, Lyndon Group can help your organization develop a breach response plan to meet regulatory requirements and maintain the trust of your clients, patients, or employees.