Document Library

* PIMS Template Data Processing Agreement (November 2025)

* PIMS Unified Risk Assessment Framework PPT (February 2026)

Presentation that explains the Unified Risk Assessment Framework

* PIMS Unified Risk Assessment Toolkit (February 2026)

Unified Risk Assessment Toolkit with data collection template and risk/benefit balancing features

A Global Survey of Privacy & Security Enforcement Actions (2008)

IAPP casebook with recommendations for reducing risk

ACI Paper — Protecting Information (2006)

Conference paper on protecting information assets.

BNA — Data Loss Prevention Technology (January 2008)

Article on data loss prevention technology published in BNA.

BNA — EU Data Protection Article (February 2007)

Article on EU data protection published in BNA.

BNA — Pandemic Planning (September 2009)

Article on pandemic planning and privacy published in BNA.

BNA Privacy & Security Law Report (April 2006)

Article published in BNA Privacy & Security Law Report.

BNAI — Managing Data Processors (August 2007)

BNAI article on managing data processors.

GDPR Incident Response Paper (Sept 2016)

Personal data breach response with template scorecard tool.

GDPR Legitimate Interests Paper (Dec 2016)

Balancing tool and inventory of reasonably expected processing activities.

GDPR Short Form Vendor Contract Annex Z (2016)

Short form vendor contract annex template.

GDPR Vendor Contract Paper (2016)

Long form vendor template for GDPR compliance.

High Risk Processing Flowchart (October 2025)

Flowchart to help assess whether privacy laws require a risk assessment.

IAPP PSR PPT Managing Supplier Risk (October 2024)

Privacy Maps 2025

December 2025 Maps showing global privacy regimes, AI regulation and US state privacy laws

Supplier Privacy Questionnaire Template (October 2024)