HIPAA/GxP Data Migration — Global Pharmaceutical Client

Own from Salesforce (formerly Own Company) — London, UK

The challenge

A global pharmaceutical client needed sensitive patient data under active legal hold — governed simultaneously by HIPAA and GxP, stored in a US data centre — moved off Salesforce into a compliant archive without breaking the hold or the compliance posture.

What I built

Led a critical data migration project for a global pharmaceutical client to transfer sensitive patient data from Salesforce to a compliant archiving solution. The data was under legal hold due to prior breaches, subject to HIPAA and GxP regulations, and stored in a US data centre. Coordinated across legal, compliance, information security, and ethics committees to design a migration plan with end-to-end encryption, immutable backup, and full audit controls.

Outcomes

• $4M reduction in storage costs
• $450M in regulatory fines mitigated
• Full TLS/SSL compliance and POC approved by ethics committee
• Delivered on time within complex legal hold constraints

Tech & approach

Salesforce · HIPAA & GxP compliance · End-to-end encryption · Immutable backup