Jephunneh L.

I started my insurance career in 2009, long before “cyber risk” became a buzzword. Over the past 13+ years, I’ve built a global career at the crossroads of insurance, privacy, and cybersecurity, helping organizations in Canada, the U.S., and Europe turn complex privacy laws into clear, actionable strategies that actually protect people — and profits. As a Privacy Consultant and GDPR Compliance Expert, I deliver Privacy Impact Assessments (PIAs), privacy program audits, and risk management frameworks tailored for today’s evolving digital landscape. I specialize in bridging the gap between insurance, legal compliance, and cyber resilience, ensuring organizations meet the requirements of GDPR, PIPEDA, PHIPA, Quebec’s Law 25, and CCPA/CPRA while maintaining business agility. My foundation was built in London with Paragon International Insurance Brokers (Lloyd’s of London) during the rollout of GDPR, where I worked with global clients, underwriters, and carriers to design privacy and compliance programs before most of the market even knew what GDPR meant. I expanded that expertise through Aon and Travelers Canada, advising industries from manufacturing and medtech to legal, financial services, and utilities on data protection and cyber readiness. Most recently, I served as Head of Business Development for TransUnion Canada, where I built cyber insurance programs for deployment through reinsurance partners into the Canadian market. I worked with the top 10 insurance companies in Canada to integrate privacy-driven risk management tools, expand cyber coverage, and bring data protection awareness to thousands of Canadian businesses. Today, as the founder of The Privileged Group, I consult with private organizations and public-sector partners to strengthen Canada’s privacy and cybersecurity posture — from cross-border data transfer compliance to incident response readiness. My mission is simple: make privacy practical, profitable, and proactive. While I may be new to Upwork, I’m not new to the work. I’ve been a privacy and cyber consultant for over five years, advising businesses and government stakeholders around the world on compliance, risk assessment, and data governance strategies that last. I don’t do generic. I build privacy programs that work — grounded in real business strategy, measurable outcomes, and long-term trust. When I’m not dissecting regulatory frameworks or designing compliance programs, I’m a law student studying to become a privacy attorney — because yes, I actually love this stuff. I spend my downtime reading emerging legislation, mentoring future cyber professionals, and finding creative ways to make complex privacy laws understandable (and maybe even interesting) for real people.