Caroline Rivett

Caroline leads our global Cyber Security and Privacy team in Life Sciences. She has over twenty years experience in  technology and risk and served as a Chair of the Audit Committee and Board member in healthcare for eight years.  Over the last ten years she has specialised in the protection of sensitive information in life sciences and healthcare.  Her clients include GSK and other global pharmaceutical companies. Prior to joining KPMG she co-founded a  company which analysed medical data for insurers and put in place secure processes around global movement of  sensitive personal data.

Professional and industry experience

• Caroline is the KPMG account lead for Cyber Security and Privacy services for four global pharmaceutical clients.
• She recently directed a team to remediate 100s of key vendor contracts between a global pharmaceutical  company and their suppliers following the invalidation of Safe Harbor, guiding them through the complex area of  international personal data flow of privacy contracts.
• One of her recent projects was with a global Pharmaceutical company to embed a fit-for-purpose governance  structure, perform a data mapping exercise, develop a risk assessment framework and embed a robust process  around third party supplier management (in order to cover Privacy risks).
• She has worked with a global Pharmaceutical company to assess the effectiveness of their Privacy Improvement  Programme and assist them in developing a five year plan to further enhance their Privacy control environment.
• Caroline co-founded a company which digitised sensitive personal information. She sold the company to US  corporation and then developed UK business. Worked with parent company to introduce secure processes over  protecting sensitive personal data.
• Defined cybersecurity strategy for prestigious bio medical research facility in London
• Caroline hosts KPMG’s regular Information Protection in Digital Health conference focusing on privacy, medical  internet of things, regulation and genomics data with external specialists and internal speakers. She is a regular  contributor on CyberSecurity in digital health in The Financial Times and speaks at conferences.
• Chair of Audit Committee for NHS Board in commissioning and for mental health foundation trust for past eight  years. Led Audit Committee review of reports from information governance teams and internal audit.
• Implemented data analysis shared services centre in South Africa serving the Europe and North America for  global professional services company. One of the project strands included implementation of high level of  protection and security over client data.
• Council member for the Royal Society of Medicine’s Telehealth & eHealth Council.