Much of this in the U.S. will play out in state laws. Kevin Lyles, privacy practice leader at Jones Day, anticipates that many states will follow the lead of Massachusetts in requiring companies to document their data security programs. John Corelli, president of JMC Privacy Consulting Group, sees state attorneys general stepping up random auditing for all areas of privacy compliance, along with the FTC.
Table 3: What separates the leaders from the pack
|Broad and deep expertise||1||1|
|Global staff and affiliates||3||4|
|Timely and thorough work||4||5|
|They understand my business||5||3|
|Good value for the rates charged||9||9|
Why the best are the best
Some things never go out of style. Since I began the survey in 2006, respondents have cited "broad and deep expertise" and "practical advice" as the top two reasons they chose the firms they did. Those concerned with protecting data want the right answer, and they want it delivered in practical terms that make sense for their organization and industry.
Also, as globalization continues apace, respondents in the most recent survey gave higher priority than they have in the past to advisory firms having "global staff and affiliates." As the previous surveys showed, good advice does not usually come cheap. Of the nine possible choices offered, "good value for the rates charged" once again ranked dead last.