Technological advances offer huge potential but are also bringing increased regulatory and compliance demands.

Duncan Card sees this scenario as the perfect environment to launch his new consulting firm, The Advisory Group, to help businesses navigate these challenges and opportunities.

The Advisory Group specialises in all aspects of technology compliance in Bermuda, as well as the management, operational, business and commercial aspects of technology and outsourcing transactions, AI development and services procurement, resilience policies, cybersecurity governance policies and best practices, digital transformation projects, Mr Card said.

After 30 years of practising law in both Canada and Bermuda, most recently as a partner at Appleby Bermuda, Mr Card has decided to apply his specialised technology, privacy and cybersecurity compliance expertise in his new role as a business management consultant.

Mr Card has also written periodic articles on aspects of Bermuda Monetary Authority policy developments and privacy law compliance for The Royal Gazette over the past four years.

“Bermuda is at the intersection of steeply escalating regulation and onerous compliance demands for all things technology, data and cybersecurity and extraordinary opportunities for advanced technological innovation and transformation,” Mr Card said.

“Now is the perfect time, and Bermuda is the perfect place” to start the new consulting firm, he added.

“I want to share my decades of technology transformation, corporate governance, outsourcing, cyber-risk management, and pragmatic privacy compliance experience with clients at the most foundational levels of their strategic planning, commercial management, and corporate governance best practices.”

Mr Card seeks to advise chief information officers, privacy officers, human resource professionals, compliance officers, and boards of directors who seek guidance on the growing demands of cybersecurity risk, technology transformation and the recent compliance requirements of privacy law compliance in Bermuda.

In addition to providing compliance support in these fields, Mr Card will also develop and provide bespoke in-house compliance seminars and training programmes for organisations, such as the half-day Pipa compliance workshop at Bermuda College on June 9. Interested parties can register at apace@college.bm.

“Without the rigorous enforcement of an organisation’s compliance with Pipa, the mere existence of that legislation will not make Bermuda an EU or UK data ‘safe harbour’,” Mr Card said.

He added: “We are likely entering the expected enforcement phase of Pipa's implementation.”

The Advisory Group will offer a Pipa Compliance Review & Assessment Service, which undertakes a full-spectrum review and analysis of an organisation’s compliance with Pipa, identifies compliance gaps, recommends pragmatic operational fixes, and offers practical guidance.

• For more information, or to contact Duncan Card, visit The Advisory Group website atwww.advisory.bm