Our Capabilities - Privacy Strategy & Transformation Services

Privacy isn't just policy - it's power. We architect smarter privacy
strategies that evolve with tech, regulation, and customer trust.

Gap Assessments

We evaluate your current privacy practices against regulatory and industry standards to identify control and capability gaps. This helps prioritize remediation efforts and build a roadmap toward full compliance.

Privacy Framework Design

We design customized privacy frameworks aligned with global regulations, business needs, and risk appetite. This includes policies, roles, processes, and governance models that support long-term compliance.

Data Discovery and Mapping

We identify and classify personal data across your systems, platforms, and third parties. Then we map data flows to understand lifecycle, processing activities, and cross-border transfers.

Risk and Impact Assessments

We conduct privacy risk and impact assessments to analyze how data use could affect individuals. This ensures risks are mitigated through proper controls before launching new initiatives.

Operational Privacy Mechanisms

We implement day-to-day privacy operations such as consent management, data subject rights handling, and breach response procedures. These mechanisms are embedded into your business and tech workflows.

Privacy Program Maturity

We assess your current privacy program and provide a strategic plan to evolve over time. We help you maintain ongoing compliance in a dynamic regulatory environment through training, monitoring and governance updates.

Take Control of Your Data with Privacy Pillar

Contact Privacy Pillar today to implement a strong governance framework tailored to your business needs.

Talk to our data privacy experts

New Jersey Data Privacy Act (NJDPA)

New Jersey Data Privacy Act (NJDPA)

Effective Date: January 15, 2025

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $10,000 for 1st violation and up to $20,000 for subsequent violations

Florida Data Privacy and Security Act (FDBR)

Florida Digital Bill of Rights (FDBR)

Effective Date: July 1, 2024

Applicability	Consumer Rights	Penalties
gross annual revenue of at least $1 billion or 50% or more revenue from targeted advertising	Access, Delete, Correct, Opt-Out, Portability	Up to $50,000 per violation

Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)

Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)

Effective Date: January 1, 2026

Applicability	Consumer Rights	Penalties
35,000 consumers or 10,000+ consumers with 20%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	$10,000 per violation and between $100 – $500 for each intentional disclosure of personal data

Indiana Data Privacy Laws

Indiana Consumer Data Protection Act (INCDPA)

Effective Date: January 1, 2026

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ consumers with data 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Tennessee Information Protection Act (TIPA)

Tennessee Information Protection Act (TIPA)

Effective Date: July 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 20% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Kentucky Data Privacy Laws

Kentucky Consumer Data Protection Act (KCDPA)

Effective Date: January 1, 2026

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ consumers with data 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Minnesota Data Privacy Laws

Minnesota Consumer Data Privacy Act (MCDPA)

Effective Date: July 31, 2025

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ consumers with data 25%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Connecticut Data Privacy Act (CTDPA)

Connecticut Data Privacy Act (CTDPA)

Effective Date: July 1, 2023

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ 25%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $500,000 per violation

Maryland Online Data Privacy Act (MODPA)

Maryland Online Data Privacy Act (MODPA)

Effective Date: Oct 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumers or 10,000+ consumers with 20%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	up to $10,000 per violation, and up to $25,000 for repeated violations

Delaware Personal Data Privacy Act (DPDPA)

Delaware Personal Data Privacy Act (DPDPA)

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 20% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	up to $10,000 per violation

New Hampshire Privacy Act

New Hampshire Privacy Act

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 25% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	up to $10,000 per violation

Virginia Consumer Data Privacy Act (VCDPA)

Virginia Consumer Data Privacy Act (VCDPA)

Effective Date: January 1, 2023

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Texas Data Privacy and Security Act (TDPSA)

Texas Data Privacy and Security Act (TDPSA)

Effective Date: July 1, 2024

Applicability	Consumer Rights	Penalties
35,000 consumer or 10,000+ consumers with 20% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Oregon Consumer Privacy Act (OCPA)

Oregon Consumer Privacy Act (OCPA)

Effective Date: July 1, 2024

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 25% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Montana Consumer Data Privacy Act (MTCDPA)

Montana Consumer Data Privacy Act (MTCDPA)

Effective Date: October 1, 2024

Applicability	Consumer Rights	Penalties
50,000 consumer or 25,000+ consumers with 25% revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Not specified

Iowa Consumer Data Protection Act (ICDPA)

Iowa Consumer Data Protection Act (ICDPA)

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Portability Opt-Out	Up to $7,500 per violation

Nebraska Data Privacy Act (NDPA)

Nebraska Data Privacy Act (NDPA)

Effective Date: January 1, 2025

Applicability	Consumer Rights	Penalties
Annual gross Revenue exceeding $10 million or buying/selling/sharing personal information of 50,000 or more consumers or 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $7,500 per violation

Colorado Privacy Act (CPA)

Colorado Privacy Act (CPA)

Effective Date: July 1, 2023

Applicability	Consumer Rights	Penalties
100,000 consumers or 25,000+ 25%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	Up to $20,000 per violation with a total maximum penalty of $500,000

Utah Consumer Privacy Act (UCPA)

Utah Consumer Privacy Act (UCPA)

Effective Date: December 31, 2023

Applicability	Consumer Rights	Penalties
$25M revenue and 100,000 consumer or 25,000+ consumers with 50% revenue from data sales	Access, Delete, Opt-Out, Portability	Up to $7,500 per violation

California Consumer Privacy Act (CCPA)

California Consumer Privacy Act (CCPA)/CPRA

Effective Date : January 1, 2020/2023

Applicability	Consumer Rights	Penalties
$25M revenue, 50,000 consumers, or 50%+ revenue from data sales	Access, Delete, Correct, Opt-Out, Portability	$2,500 per violation; $7,500 for intentional violations