Case Study: a biotechnology and gene therapy company strengthens HIPAA and privacy compliance with BDO

Biotechnology and Gene Therapy Company reduces privacy risk with BDO's HIPAA program evaluation for $220 million business

A biotechnology and gene therapy company engaged BDO for a HIPAA and Privacy Program Evaluation. The company processed significant protected health information but had a nascent privacy program, creating substantial risk exposure. It needed a consistent methodology to identify, prioritize, and remediate privacy risks.

BDO developed and operationalized a Privacy by Design and Default program, coordinating with IT and Security to manage risk and compliance. This collaborative approach reduced time and confusion among staff, generating critical business buy-in to meet privacy compliance objectives.