Nancy is a Senior Manager within EY's Americas Data Protection and Privacy practice in the Southeast. Prior to her time with EY, Nancy had over 30 years of experience working in professional trade associations in the areas of privacy, IT auditing, SOC reporting, Sarbanes Oxley (SOX) and COBIT 5. Nancy is responsible for managing the firm's privacy assurance services, including privacy SOC 2 reporting services. Nancy has been leading the internal audit efforts for the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), as well as other recently enacted US and global privacy regulations.