Data Protection & Privacy
Streamline your privacy risk management through strategic and cost-effective privacy managed service
Why RSC?
Learn More
We seek to understand your particular needs for privacy compliance and would like an opportunity to share our industry insights and experience. We will collaborate with you on the best managed service solution that meets your privacy program expectations and business objectives.
RSC Privacy Managed Service Offerings
Privacy Impact Assessment (PIA)
Third Party Privacy Risk Management
Data Subject Rights (DSR) Response
The PIA offering includes initial thresholding analysis and risk assessment to identify and mitigate privacy risks on initiatives processing PII, consistent with the “Privacy by Design” Principles.
Data Subject Rights (DSR) Response
Third Party Privacy Risk Management
Data Subject Rights (DSR) Response
Our DSR offering is designed to support companies respond to consumer privacy right requests (e.g., data access, rectification, deletion) end-to-end, from request intake, validation, data search, and up to fulfillment.
Third Party Privacy Risk Management
Third Party Privacy Risk Management
Third Party Privacy Risk Management
This offering is typically integrated with an existing Third-Party Risk Management (TPRM) program to help assess and mitigate privacy risks related to personal information shared with vendors and third parties.
Data Lifecycle Management
Periodic Privacy Risk Assessment
Third Party Privacy Risk Management
This offering supports the maintenance of data inventory and mapping to understand how personal information moves across the company and identify privacy and data protection controls throughout the data lifecycle, starting from data collection, usage, sharing, storage, retention, and up to disposal.
Periodic Privacy Risk Assessment
Periodic Privacy Risk Assessment
Periodic Privacy Risk Assessment
The Periodic Privacy Risk Assessment offering assesses the current state of program capabilities, including policies, procedures, controls and privacy technology enablers against relevant privacy regulatory obligations and industry standards. Program improvement roadmap with actional recommendations is co-developed with the company to address any identified risks.
Privacy Internal Audit Support
Periodic Privacy Risk Assessment
Periodic Privacy Risk Assessment
Privacy Internal Audit Support augments the capability of the 3rd line of defense, providing for the privacy subject matter expertise needed to effectively plan and scope the audit, execute audit procedures, and evaluate the audit findings.
Privacy Controls Framework Maintenance
Privacy Metrics Dashboarding & Reporting
Privacy Metrics Dashboarding & Reporting
This offering supports the maintenance of effective and up to date Privacy Controls Framework that reflects new or changing privacy regulatory obligations and responds to emerging privacy risks.
Privacy Metrics Dashboarding & Reporting
Privacy Metrics Dashboarding & Reporting
Privacy Metrics Dashboarding & Reporting
This offering supports the preparation of privacy dashboard and reporting of privacy metrics, consisting of Key Risk Indicators (KRIs) & and Key Performance Indicators (KPIs) to enable timely and responsive privacy program oversight and monitoring.
Our Leadership Team & Independent Client Advisors
Dino Landingin - Data Protection & Privacy Service Leader
About Dino
Dino is the Senior Managing Director leading the Privacy Managed Service Practice at RSC Management Group. He advises organizations, including Fortune 500 companies, on key and latest privacy and data protection issues impacting their business strategy, product launch, technology transformation, and business initiatives. Dino leads managed service delivery, advisory works, assessments, and audits covering privacy compliance and data protection requirements under US and global regulations, standards, and industry frameworks.
Dino significantly contributed to growing the data protection and privacy offerings of global consulting firms, including Big 4, from a nascent to a leading practice in the market. He holds key professional certifications, including Certified Information Privacy Professional (CIPP-US), Certified Information System Security Professional (CISSP), CPA (Licensed in New York and New Jersey), and PMP. He completed a certification program at Columbia University in IT Privacy and Security.
Dino is based in New York Metro and is passionate about developing next generation solutions consisting of methodologies and technology capabilities around privacy and data protection. His work helped organizations build robust and sustainable programs to anticipate for emerging risks and regulations.
Jose "Jun" Tan Jr. - Solution Delivery Advisory
About Jun
Jun is a Risk and Control Subject Matter Advisor (SMA) supporting the RSC Solution Delivery Team. As an SMA, Jun has extensive experience in the fields of internal controls, auditing, business intelligence, due diligence, and system design, review, and analysis. He advised clients and built risk management programs across a broad range of industries, including banking, technology, retail, real estate, telecommunication, automotive, manufacturing, and service sector.
He currently serves as the Chief Audit Executive of a large construction and engineering services conglomerate operating in the Midde East, Africa and Asia-Pacific countries. Jun has been a trusted business advisor in the fields of risk management, internal controls, and forensic investigation to major companies in the Asia-Pacific, including Philippines, Singapore, Indonesia, Hong Kong, Malaysia, Japan, Korea, and Taiwan.
Prior to joining the industry, Jun led Risk Consulting, Internal Audit and Forensic practices at Big 4 firms. He is a part time professor at a major university teaching Auditing Theory and Accounting Information System. He regularly lectures on forensic auditing, Sarbanes-Oxley compliance, internal controls, and risk-based auditing.
Independent Client Advisors
Glenn Morton - Risk Management & Compliance
About Glenn
Glenn advises clients on risk management and compliance in RSC's service delivery and engagements. He has more than 30 years of experience leading global IT risk management and compliance function across industries, including with the Federal Reserve Bank, global pharmaceutical company, and leading telecommunication company.
Glenn is highly regarded within the industry for his expertise and innovative approach to risk management that enhances data safeguards, availability, quality while at the same achieving cost savings and compliance with evolving legal, regulatory, and business environments. He built global Centers of Excellence (CoEs) for Vendor Risk Management and Change Management programs. The CoEs ensured regulatory compliance across the enterprise and significantly improved the availability of key business applications and supporting infrastructure. In 2009, Glenn pioneered the development and conceptual design of the first commercially available supplier risk management tool, currently one of the best-in-class tools for third party risk management and outsourcing risk governance.
Glenn is a recognized thought leader within the field of IT risk management and compliance. He has been invited to speak at industry conferences on managing outsourcing and offshoring risks, vendor risk management, disaster recovery planning, business continuity, emergency response, and crisis management.
Brian Troisi - Data Protection & Cybersecurity
About Brian
Brian provides data protection and cybersecurity services to clients engaging RSC services. With over 20 years of experience, Brian is a seasoned expert and industry leader in cybersecurity and information management. He helps clients navigate the complexities of technology in global corporate environments while offering pragmatic data protection for small to medium enterprises. His career highlights strategic leadership and operational excellence in transforming IT security control environment and platforms.
Brian led and delivered a transformative cybersecurity managed services initiative, significantly enhancing operational efficiencies and cost structures, for a leading telecommunication company. During his tenure at a global pharmaceutical and life science company, Brian built a robust corporate information security program that adheres to leading industry standards and complies with key privacy and data protection regulations. He successfully led a fully operational team with representatives from multiple business lines and led responses to privacy data breaches and incidents.
Brian holds a CISSP certification. His expertise includes building capabilities on data retention and disposal, asset inventory management, process and systems engineering, risk assessments, and development and implementation of data protection risk mitigation strategies.