Advisory on ethics, compliance, privacy and AI governance for regulated organizations.
ComplyEdge Advisory Group provides independent review and program advisory to organizations subject to regulatory oversight, enforcement agreements and cross-border obligations. Our work is anchored in the United States and extends to the European Union, the United Kingdom and Africa.
Matters we handle
| Matter | Deliverable |
|---|---|
| Independent review required by an agreement or order | A written assessment from a reviewer independent of the matter |
| Evidence due to a regulator by a fixed date | Records organized and traceable to source |
| HIPAA Security Rule risk analysis | A written analysis and a prioritized remediation plan |
| Privacy leadership, or entry into a new market | A fractional data protection officer, or a written market-entry assessment |
| AI tools in use without a governance framework | An inventory of AI in use, a risk register and a governance framework |
| A technology acquisition | A data compliance review completed before closing |
Experience
Representative engagements.
Board Compliance Expert
Independent oversight of organizations subject to Corporate Integrity Agreements with HHS OIG.
Integrity programs under development bank sanctions
Program design for a company subject to World Bank sanctions, and independent review for a company subject to African Development Bank sanctions.
Global data protection operations
Led the team executing day-to-day operations of a global data protection office, including privacy assessments, data subject request management and process development for multiple businesses across life sciences, financial services, retail and hospitality.
Our approach
Regulatory experience across the compliance function.
ComplyEdge was founded by Kevwe Odima. He spent three years on independent compliance monitorship teams at Affiliated Monitors, Inc., supporting reviews of companies subject to Department of Justice, FCC, FTC, state attorney general and World Bank enforcement.
That experience informs how we work. We know what a monitor or regulator will test, which documents resolve a question, and how a program that exists only on paper is treated on review. We design programs and we conduct independent reviews, and we advise which of the two a situation requires.
The same approach applies to privacy and data protection, AI governance, healthcare risk analysis and technology transactions, where the standard is a written deliverable that can be examined.
Our practice
Areas of practice.
Regulatory and independent review
Board Compliance Expert services under Corporate Integrity Agreements, corrective action plan support and compliance program design.
Read moreHIPAA risk analysis
The written Security Rule risk analysis for healthcare practices, at a fixed fee agreed in advance.
Read morePrivacy and data protection
Fractional data protection officer services, regulatory readiness in the United States, the European Union, the United Kingdom and Africa, and data compliance review ahead of acquisitions.
Read moreAI governance
Shadow AI audits and governance frameworks aligned to the NIST AI RMF and the EU AI Act.
Read moreWhere we work
Three regions, one standard.
United States
Enforcement-driven reviews, HIPAA risk analysis and multi-state privacy compliance, including CCPA and CPRA.
European Union and UK
GDPR readiness, supervisory authority registration and fractional DPO services.
Africa
Nigeria NDPA implementation, and integrity programs adapted to local frameworks across Sub-Saharan Africa.
Our process
A defined process.
- ScopeA confidential initial conversation, followed by a written scope stating the deliverable, timeline and fee.
- AssessReview of documents, systems and records, and interviews with the people who operate them.
- DeliverA written deliverable with ranked findings, and an owner and date for each action, followed by continued support as the matter requires.
Ongoing work, such as a fractional DPO, is retained on a monthly basis. Project work is fixed in scope and fee. Where a matter spans several disciplines, we engage specialists from our advisor network.