Trusted Leaders.
Passionate Collaborators.
We thrive on delivering practical results.
Who we are.
We are consultants who specialize in privacy, security, data strategy and a range of cutting-edge technology ethics work. We have seen how privacy, security and ethical frameworks have enabled innovation and developed a competitive advantage for our clients.
What's in a name?
We chose the name "Bamboo" for our company because of the qualities inherent to the bamboo plant.
Bamboo plants are incredibly strong and versatile in their use. At the same time, they hold the world record as the planet’s fastest-growing plant. They are sturdy, but they also remain flexible and agile. They grow tall vertically while also spreading their roots to impact the space around them.
We strongly believe in these qualities of strength, flexibility, and sustainable growth. We want to help our clients enhance those traits within their companies.
Who we work with.
From startups to multinational corporations, all businesses are responsible for personal data they collect, use and disclose. We’ve worked with companies in various industries such as technology, retail, healthcare, telecommunication, finance, insurance, marketing, education and more. We’ve helped companies design cutting-edge privacy and security practices to help them grow in market with integrity and trust.
Our values.
Pivot mistakes into learnings
Mistakes happen. We are human after all. We turn hiccups into meaningful experiences for growth. We pivot failures into opportunities by understanding what went wrong so we can start again even better.
Stay curious
Our insatiable hunger for knowledge empowers us to be perpetual learners and seek knowledge. By staying endlessly curious, we unlock innovative solutions, question the status quo to enrich our expertise and deliver excellence for our clients.
Have fun
Having fun at work is our secret sauce for staying creative and interesting. We infuse our work with laughter and a playful spirit so we can collaborate, innovate, and propel toward triumphs.
Always be humble
True humility begins with acknowledging that no one knows everything. There is always more to learn, discover, and improve on. We are open to the infinite quest for endless improvement.
Be boldly you
We are unapologetically authentic. Creating a vibrant tapestry of diverse perspectives, ideas, and talents drives our success.
Integrity goes without saying…
Our philosophy.
We are not your typical consultants – but you’re not a typical client.
In other words, we don’t believe in a one-size-fits-all method, especially not in this business.
We do more than just
solve problems.
We teach you sustainable solutions. That way you won’t have to depend on us at every turn. We’ll help you understand the root of your privacy problems and how to better solve them. We will work together to operationalize Privacy by Design by embedding privacy, security, and trustworthiness into each of your processes, products, and services.
We build long-lasting relationships with our clients.
We collaborate with our clients to build privacy, security and trust into their goals, values, and strategies. We’ll teach you practices that can seamlessly become a part of your company culture. That way, your data (and that of your customers) will be protected far into the future.
We listen to you.
We find out what your company’s goals, values, strengths and weaknesses are. Then, we draw on our experience and skills to design unique, creative and strategic solutions. The end goal? A clear future direction and transformative growth for your company.
Sharon Bauer, Founder
Sharon started her career in insurance litigation where she was a partner at a Toronto law firm. Fascinated by the rapid evolution of technology and the precarious nature of our personal data, Sharon’s passion about privacy and cybersecurity was ignited - so much so that she pivoted her career and has since been dedicated to providing privacy consulting services. Sharon worked as a Senior Manager in the Digital Privacy and Information Management team at KPMG Canada, where she also led the Privacy by Design Certification program.
Sharon works with startups, multinational corporations and everything in between. She identifies privacy risks in relation to international privacy regulations, designs strategic privacy solutions for digital transformation projects, and aligns emerging technologies with privacy and ethical regulatory expectations. Sharon has worked with renowned companies in the telecommunication, financial, marketing, technology and education sectors.
Sharon is an initiator and will go out of her way to get things done, which is where her entrepreneurial spirit comes from. She is passionate about everything she does and truly cares, not only about executing exceptional work but also about her clients and their success.
Sharon regularly publishes on privacy and cybersecurity. She is frequently featured on The Lawyer’s Daily. She is also a sought-out speaker on emerging privacy topics.
Ross Saunders,
PrivSec Director
Ross Saunders is a global privacy, defensive security, and infrastructure specialist working with numerous industries to implement privacy programs and technical infrastructure controls.
With a background in IT administration, software development, and Governance, Risk & Compliance (GRC), he is able to assist in a wide range of disciplines surrounding compliance, security, and privacy, regularly assisting companies with advisory, awareness campaigns, and practical implementation of recommendations.
Ross holds a master’s degree in the Management of Technology and Innovation, and holds designations and certifications in privacy legislation (CIPP/E), ethical hacking (CEH v10), and paralegal practice. Ross currently serves as the co-chair of the Johannesburg chapter of the International Association of Privacy Professionals (IAPP) and is a Professional member of the Canadian Association of Professional Speakers (CAPS).
In 2019, Ross published a book called “This Is Not What I Signed Up For: A survival guide for first-time managers” to help technical subject matter experts move into management roles. It is available for purchase in eBook and softcover at Amazon.ca.
Lauren Preston,
Privacy Solutions Architect
Lauren is an experienced privacy strategist who brings with her a wealth of international privacy knowledge and experience. Lauren worked as in-house counsel at a global high tech - high touch financial institution where she was instrumental in implementing privacy by design in the rollout of GDPR, data privacy advisory as well as contract negotiation and management for vendors in data and tech. Lauren also has experience working in the health care tech industry where she implemented a data privacy program and acted as privacy compliance and legal counsel.
As Bamboo's Privacy Solutions Architect, Lauren focuses on data compliance and risk management with a focus both on local and cross jurisdictional technology and privacy matters. Having worked in-house at a global financial institution, Lauren understands the nuances of developing and implementing a streamlined privacy program within organizations and the nuances that may arise between different functions of the business. Lauren makes it her mission (and enjoys the challenge) to develop practical tools for companies in all industries and help them reduce their privacy risks while still achieving their business goals and strategies. In developing programs and advising on privacy aspects, Lauren aims to create a sound privacy culture within the organization and help our clients gain consumer trust.
Lauren is a Certified Information Privacy Professional in Canada (CIPP/C) and started her career as a lawyer in private practice in South Africa before moving in-house into tech and data.
Albina Magomedova,
Privacy Analyst
Albina has a background in Global Affairs & Public Policy having received a Masters in Public Policy from the University of Toronto’s esteemed Munk School. As a Privacy Analyst at Bamboo, Albina’s keen interest in governance and data protection makes for the perfect combination when helping our clients develop practical processes and navigating bureaucratic red tape around privacy and security.
Albina works with clients to identify their privacy risks and creates privacy programs that are manageable and sustainable for businesses of all sizes. With her analytical mindset, Albina takes the time to understand business drivers and business culture to help her find solutions that align with privacy laws and business goals.
Albina participated in various academic and professional competitions. She was the winner of the 2023 Cyber Security Hackathon hosted by the City of Toronto, SiberX, and Ontario’s Cyber Security Centre of Excellence. Albina writes on emerging technologies relating to privacy and security.
Board of Advisors
Being experts in privacy and security also means that we clearly see that there are many opinions, perspectives and experiences in this ever-evolving landscape. We do not want to miss any blindspots, which is why we have a prestigious Board of Advisors.
“The Data Governance Expert”
Jeff Jockisch is a data governance expert, data privacy researcher and the CEO of PrivacyPlan. He does original research, consults on privacy strategy and data governance, advises privtech startups, and hosts a live weekly show called Your Bytes Your Rights. Jeff is unique in his work creating and managing data sets about data privacy. His independent research focuses on privacy-enhancing tech, privacy regulations, AI, and more, all in an effort to gain insight into the privacy landscape. His understanding of data, data science, and data governance is academic and operational, deriving from experience designing knowledge graphs, working with big data, creating taxonomies and classifiers, managing data quality, and building content management systems.
“The U.S. Privacy Expert”
Debbie Reynolds, “The Data Diva,” is a world-renowned technologist, thought leader, and advisor working at the intersection of Data Privacy, Technology, and Law. Ms. Reynolds is an internationally published author, highly sought speaker, and top media presence about global Data Privacy, Data Protection, and Emerging Technology issues. Ms. Reynolds hosts the number one award-winning “The Data Diva” Talks Privacy Podcast. She has been named one of the Global Top Ten Privacy Experts by Martechvibe and, she has been named one of the Global Top 30 CyberRisk Communicators by The European Risk Policy Institute in 2021.
“The GDPR Expert”
Tash Whitaker started her career managing master data, implementing governance and protecting data privacy in the days when Mark Zuckerberg was still writing BASIC on his Atari and GDPR was not yet a four letter word. With over 20 years of experience with Dun & Bradstreet, Cisco and Moorcrofts LLP, Tash now uses her knowledge and experience to guide organizations through their data privacy journey, offering consultancy, advice, and training, as well as data privacy as a service.
With a sound educational background (BA (Hons) CIPP/E, CIPM and a DPO certification from Maastricht University, Faculty of Law), Tash shares her thought leadership by speaking at conferences, industry forums and learns from her extensive LinkedIn network of like-minded professionals.