Eugene C.

Data privacy consultant with a JD, a CIPP/US certification, and a deep understanding of technology, amassed as an enterprise engineer at several Fortune 500 companies, including Xerox, Mellon, and PwC. I help technology-forward startups and scaleups navigate the gap between privacy obligations and how their systems actually work. Typical engagements: • DPA and BAA review (incoming from customers, outgoing to vendors) • Privacy policy drafting and audit (CCPA/CPRA, GDPR, HIPAA) • Vendor privacy and security assessments • AI governance framework development (NIST AI RMF, EU AI Act readiness) • CCPA/CPRA compliance review for US-facing businesses • Privacy-by-design reviews for products in development I work with founders, in-house counsel, fractional GCs, and engineering leaders who need a privacy specialist that can speak both languages. Typical engagements are discrete and scoped; longer-term advisory arrangements available for companies building out their privacy function. Credentials: JD, NY Bar, CIPP/US, BS Computer and Information Science. This is consulting and compliance advisory work, not legal representation.