Legal  /  Data Compliance

Data compliance.

How Norm E. Murray governs, protects and respects personal data.

Norm E. Murray operates within a rigorously defined data governance framework aligned with the General Data Protection Regulation (GDPR), applicable U.S. privacy laws including the California Consumer Privacy Act (CCPA/CPRA), and recognized global best practices.

We apply a privacy-by-design and privacy-by-default approach, ensuring that personal data is collected, processed, stored, and protected with clear purpose, lawful basis, and strict access controls.

01Our principles

All data handling activities are governed by the following principles:

  • Lawfulness, fairness, and transparency in all processing activities
  • Purpose limitation, ensuring data is only used for explicitly defined outcomes
  • Data minimization, collecting only what is necessary
  • Accuracy and integrity of data throughout its lifecycle
  • Confidentiality and security, supported by enterprise-grade safeguards
  • Accountability, with clear governance and oversight mechanisms

02International transfers

Where personal data is transferred across jurisdictions, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) and recognized international data transfer mechanisms.

03Your rights

We respect and uphold individual rights under applicable laws, including the right to access, correct, delete, and restrict the processing of personal data.

04Sharing and third parties

Norm E. Murray does not sell personal data and does not engage in uncontrolled data sharing. All third-party partners are subject to strict data processing agreements and compliance obligations.

05Responsible AI and data stewardship

In an environment where artificial intelligence is reshaping how data is generated, interpreted, and deployed, we extend our compliance posture beyond regulation to include ethical data stewardship and responsible AI-aligned governance.

Data compliance here is not treated as a regulatory requirement. It is a core component of how we build trust, manage risk, and operate at the executive level.

Questions about your data?

To request access, correction or deletion of your personal data, or to ask anything about this policy, get in touch. Every inquiry is read by Norm Murray.

Contact Norm →