# Aethicor

> Aethicor is a data privacy and AI governance consultancy led by Nitin Gupta, Principal. Aethicor helps organizations build privacy programs and AI governance that hold up under scrutiny, and that their teams can actually run.

Aethicor works with organizations on UK GDPR & DPA 2018, EU GDPR, EU AI Act, CCPA & State Privacy Laws, ISO/IEC 42001, NIST AI RMF. Every engagement is delivered directly by a certified practitioner (IAPP AIGP, CIPP/E, CIPP/US, CIPM, CIPT, FIP). Based in Pleasanton, California; works with clients in the United States, United Kingdom and European Union.

## Services

- **Privacy program build**: Design and stand up a privacy program: governance, policies, records of processing, DPIAs, data subject rights and vendor oversight.
- **AI governance**: AI inventories, risk classification, policies and controls aligned to the EU AI Act, ISO/IEC 42001 and the NIST AI RMF.
- **Fractional privacy lead**: Senior privacy leadership on a part-time basis, embedded with your team and accountable to your leadership.
- **Assessments & audits**: Gap assessments, DPIAs and AI impact assessments with a prioritized, practical remediation plan.
- **Privacy by design**: Work alongside product and engineering so new features and models ship with privacy built in, not bolted on.
- **Training & enablement**: Role-specific training for boards, legal, product and data teams on privacy and responsible AI.

## Approach

1. **Assess**: Understand your data, AI use and regulatory exposure, and benchmark where you stand.
2. **Prioritize**: Turn findings into a risk-ranked roadmap your leadership can approve and fund.
3. **Build**: Implement policies, processes and controls that fit how your teams already work.
4. **Sustain**: Embed ownership, metrics and reviews so the program keeps pace with change.

## About the Principal

I’m Nitin Gupta, Principal at Aethicor. I’m a privacy and AI governance leader who has built and run privacy and AI programs for global consumer brands, a media agency network, and several consulting clients.

I started Aethicor because, as a practitioner, I saw how under-resourced privacy teams are. Having worked in-house, I know how to make real progress with limited time, budget and headcount, and how to build a program the business will actually adopt.

I advise on the EU AI Act, GDPR, UK GDPR and the Data Protection Act 2018, the CCPA and other US state privacy laws, GLBA and HIPAA, and Canada’s PIPEDA and provincial privacy laws. I’m also hands-on with the technology, including OneTrust and other privacy and AI governance program management tools.

## Pages

- [Home](https://www.aethicor.com/): services, approach, background and contact
- [Services](https://www.aethicor.com/#services): what Aethicor offers
- [About Nitin Gupta](https://www.aethicor.com/#about): background and IAPP certifications
- [Blog](https://www.aethicor.com/blog/): articles on privacy and AI governance
- [Contact](https://www.aethicor.com/#contact): inquiry form; replies within one business day
- [Book a consultation](https://cal.com/aethicor/30min?overlayCalendar=true): free 30-minute call

## Articles

- [SB 690 Gives Partial Relief from California Invasion of Privacy Act (CIPA) Lawsuits and Demand Letters](https://www.aethicor.com/blog/sb-690-gives-partial-relief-from-california-invasion-of-privacy-act-cipa-lawsuits-and-demand-letters/): The SB 690 ends private CIPA pen register and trap and trace lawsuits from 2027, but wiretap, CDAFA and other states’ claims remain. This blog post explains what has changed and how you can address the risks that remain.

## Free resources

Practical toolkits, emailed on request from https://www.aethicor.com/#resources:

- **EU AI Act readiness checklist** (checklist): Classify your AI systems and map the obligations that apply to each risk tier.
- **Record of processing (RoPA) template** (template): A ready-to-fill Article 30 register with guidance notes for each field.
- **AI impact assessment framework** (framework): A structured assessment combining privacy, fairness and accountability questions.

## Contact

- Email: hello@aethicor.com
- Website: https://www.aethicor.com/
- LinkedIn (Nitin Gupta): https://www.linkedin.com/in/nitgupta/
- LinkedIn (Aethicor): https://www.linkedin.com/company/aethicor