Cookies settings & disclosure

About us

A message from our founder and CEOOur OfficesOur StaffCareers


At Achieved Compliance, we understand the critical role data plays in the success of your company. We believe good data governance is essential to your ability to make the most of that data – to create, to innovate, and to serve your customers.

We are also keenly aware that compliance with new data protection regimes is challenging, especially for mid-market companies that do not have specialized expertise in-house. Typically, companies of this size have time-constrained staffs which mean fewer resources are available to work on data protection compliance.

Achieved Compliance can help! Our mission is to help you establish good data governance and arrive at privacy outcomes that meet regulatory requirements, provide consumers with effective protections, and stay competitive in the marketplace. To achieve this, we provide flexible and easy-to-use software solutions that are designed for non-privacy professionals. Whether you are looking for help with data discovery or need a Virtual Protection Office – combined with our tools and client counseling services, we can help you remain competitive while meeting the challenges of responsible data practices.

Achieved Compliance is headquartered just outside of Washington DC, in Alexandria, Virginia. Achieved Compliance Advocacy Ltd.’s offices are strategically located in the UK and Amsterdam. Our staff has a combined 60 years of experience in data protection, and we are ready to help you establish good data governance.



our offices


Achieved Compliance Solutions

2000 Duke Street

Suite 300

Alexandria, VA 22314



Achieved Compliance Advocacy, Ltd

Princess House

Princess House Way

Swansea, UK SA1 3LW



Achieved Compliance Advocacy, Ltd

Singel 250

1016 AB Amsterdam




Achieved Compliance Advocacy, Ltd

Block 1, Blanchardstown

Corporate Park, Ballycoolin Rd.

Dublin, Ireland D15 AKK1


our staff

Melise Blakeslee


Melise has over 20 years’ experience in commercializing and protecting data. She has advised numerous companies in technology and IP law as the founder of Sequel Technology Law, a Washington DC based law firm established in 2009. Previously, Melise served as the head of the Internet and IT-transactions group for the international law firm, McDermott Will & Emery. Her practice routinely involves counseling global companies, particularly in the financial and IT sectors, about data protection and compliance.

After years of counseling clients about data protection and commercialization Melise understood that small and mid-tier businesses required a compliance solution tailored to their unique needs. In Achieved Compliance, Melise seeks to empower companies with an in-house approach to compliance that is easy and cost-effective, and offers the high-quality advice, resources and guidance she provides to her clients.

Melise is a noted authority and speaker on protection of personal data and cybercrime. Oxford University Press published her first book on cybercrime, investigation and litigation in 2015.  Her second book on enforcing intellectual property and data rights, was published in April 2017 by Lexis Nexis.



Paula brings 25 years of privacy and data protection policy development and representation expertise to her role at Achieved Compliance. Prior to coming to Achieved Compliance, Paula worked at Intel Corporation, where she was Director of Global Privacy Policy. There she developed and coordinated data protection policy across the company, focusing particularly on the European Union.

Prior to her tenure at Intel, she served as Vice President for Global Policy at the Centre for Information Policy Leadership at Hunton & Williams LLP, a pathfinding privacy and information policy think tank located in Washington, D.C. addressing cross-border data flows, emerging technologies, and cyber security issues. She was counsel for the Center for Democracy & Technology; Senior Attorney Advisor for the National Telecommunications and Information Administration of the Department of Commerce; and Senior Analyst for the U.S. Congress Office of Technology Assessment. Paula has extensive experience working on information policy issues in developing countries and with international organizations such as the Organization for Economic Cooperation and Development and APEC. She is a graduate of John Carroll University and received her law degree from Case Western Reserve University.

Shawn Curtis


Shawn brings a wealth of practical technology and management experience to Achieved Compliance. He has over 20 years of experience in programming and management with companies such as Wal-Mart, Inc., Dial Corp., WeightWatchers.com, Nike and many others. At Achieved Compliance, Shawn uses his knowledge of web development, cyber security, and data privacy to lead our company’s technology initiatives. In addition to his vast knowledge of business technologies, Shawn also has a Juris Doctorate from The George Washington University Law School and has practiced in technology law for many years.  Shawn provides our clients with practical and efficient guidance on all matters related to IT contracting and security arrangements.  



Marilyn Lamar is an attorney, author, and speaker with more than 20 years of experience in corporate and information technology law including data privacy and security issues, data use agreements for multi-party databases, software development, and cloud computing services. Marilyn helps Achieved Compliance clients navigate the intersection between the GDPR and US laws governing the protection of health-related data.

Marilyn is the current President of the American Health Lawyers Association.

After a clerkship with the Seventh Circuit Court, Marilyn began her private practice career at McDermott Will & Emery LLP where she rose to the position of capital partner. During her tenure, she chaired the Health Law Information Technology practice group and co-chaired its HIPAA practice group. She also represented pharmaceutical, logistics, banking, and other clients in mergers, acquisitions, joint ventures, reorganizations, software licensing, and regulatory matters.

Marilyn received a B.S. in Psychology from the University of Illinois at Urbana-Champaign and a J.D. degree from the University of Chicago Law School.



Michael Sutton brings over 15 years of international experience in creating business strategies and identifying and managing the integration of complex acquisitions and joint ventures to Achieved Compliance. He has led multiple project management teams implementing ERP systems and delivering the GDPR program for a US multinational over the years.

As the lead for the GDPR program development and roll out across the European business, Michael was involved with the following:

  • developing policies ensuring compliance with the GDPR including, but not limited to
  • Data Subject Access Requests (DSAR’s),
  • Erasure Requests, (Right to be Forgotten) and
  • Data Breach Management.
  • Embedding processes across the businesses including
  • Data Protection Impact Assessments (DPIA)
  • Vendor Due Diligence
  • Review and sign-off of Data Processing Agreements (DPA’s)
  • Record of Processing Activity (ROPA)


Lanre Oluwatona is a data protection consultant, trainer, and data protection officer with over 25 years’ experience in IT compliance, change and project management and holds the following qualifications:

  • Fellow – International Association of Privacy Professionals.
  • Certified Information Privacy Professional (CIPP/E).
  • Certified Information Privacy Manager (CIPM).
  • Certified Information Privacy Technologist (CIPT).
  • European Certified Data Protection Officer (ECDPO).
  • Project Management Professional (PMP).
  • Risk Management – Management of Risks – Foundation (MOR).
  • Green Belt – Lean Six Sigma Business Process Improvement.

Lanre is currently the Data Protection Officer (DPO) for two National Hospitals in Dublin, Republic of Ireland and advises the Board of Research Ethics of both hospitals on data protection issues. He is familiar with data protection and privacy laws from multiple jurisdictions including the US (CCPA) Nigeria, Kenya, and South Africa.

He previously worked at Hewlett Packard, Dell, the Irish Cancer Society, and the Irish Computer Society where he was responsible for the management and successful delivery of several medium to large-scale compliance and IT projects. During his time at the Irish Computer Society, Lanre designed and developed the European Certified Data Protection Officer training program, one of the leading data protection certification programs in Europe.

Terry Chapman

Consultant, CISSP

Terry Chapman is an IT and cybersecurity executive with over 35 years of experience building, operating and securing IT systems. During his career with the Wolseley PLC group, Terry has been a developer, managed operations teams, built and managed enterprise architecture teams, and created and managed cybersecurity programs. He has deep technical experience in Information Security Architecture, Networking, and Security Operations. He has extensive experience with security, privacy, and compliance Frameworks, such as NIST CSF, NIST 800-171, ISO 27001, PCI-DSS and GDPR.

Terry believes that a risk-based approach is required to create security programs that scale and are adaptable to changing conditions. He has successfully applied this approach with companies that range in size from 10 people to Fortune 100 companies.

Terry holds the Certified Information Systems Security Professional (CISSP) certification.

Laura de Wit


Laura de Wit has a presence in Switzerand, Spain and The Netherlands and speaks multiple languages. Laura is a Jurist and has over 25 years of significant international experience advising corporate organisations across various jurisdictions.

Claire Grindey


Claire Grindey lives in London and speaks French, Italian, Swedish and Dutch. She has 25 years of professional experience, with a focus on technology and strategic growth, and has consulted for PropTech and FinTech. Claire is a trained by the IAPP in data privacy.


Join our dynamic team of global compliance professionals. Learn more about current openings below.
Please apply via application link with cover letter and detailed resume.

EU Representation Customer Service:  Spain Or Germany

Achieved Compliance Advocacy, Ltd. and its affiliated company Achieved Compliance Solutions LLC provide end-to-end data protection solutions for businesses of all sizes. We help our clients establish accountability-based data governance that responds to the requirements, regulations, and demands of the data-driven market. As part of its suite of services, Achieved Compliance Advocacy represents companies in the EU as an appointed representative to fulfil General Data Protection Regulation requirements.


Achieved Compliance seeks an individual in Spain or Germany to act as a customer service liaison with our clients, conduct client intake, check the completeness of processing records, establish a communications protocol, and aid in responding to initial inquiries of European data protection authorities and data subjects on all issues related to client processing of personal data. As part of these duties you will become familiar with each business, its processing records, and with Achieved Compliance’s proprietary platform, PrivacyMinder®, for maintenance and update of processing records. You will work closely under supervision with one of Achieved Compliance’s consultants or attorneys. This individual will also attend, as needed, meetings on data protection and privacy convened by European institutions, trade associations and policy development organizations and report on same to our clients. Some office administration will be required.

Job Description

This is an entry-level, part-time position. Training will be provided. The successful candidate will have a bachelor’s degree or equivalent, fluency in English and at least one European language, and an interest in data protection. A law degree is not required. Paralegal experience will be helpful. Applicants should be responsive, self-starting and able to work easily in a professional manner across cultures, time zones, and languages.


want more info about data privacy?

contact us