Privacy and Security

Prospect Research Inc., d/b/a Comprehensive Prospect Research (“CPR”), is a leading full service prospect research firm. Members of the firm adhere to the standards of ethics set by the Association of Professional Researchers for Advancement (APRA) and the Association of Fundraising Professionals (AFP).

We use only industry-standard, publicly available resources during the course of our work. The firm never resells client’s confidential information under any circumstances. We apply strict measures for the security of collection, storage and transfer of client data in strict adherence to all applicable laws and codes including, but not limited to, DPPA, Fair Credit Reporting Act, FERPA, GLBA, General Data Protection Regulation (GDPR), HIPAA, New York State Security Breach Notification Law, and Sarbanes-Oxley requirements.

CPR complies with the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries and Switzerland. CPR has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement.

EU residents have the right to access personal data about them and to request the correction, amendment, removal and/or limitation of the use and disclosure of their personal data processed by CPR. Anyone may also request that we do not conduct prospect research on them on behalf of specific clients.

CPR is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) with respect to its compliance with the EU-U.S. Privacy Shield Framework. If you live in the EU, any complaints or questions regarding CPR’s compliance with the Privacy Shield Program should be sent to the email or postal address provided herein. CPR will respond within 60 days.

If you do not receive acknowledgment of your complaint within 60 days, or if you cannot resolve your complaint directly with CPR, you may contact the International Centre for Dispute Resolution, the international division of the American Arbitration Association (ICDR/AAA), by visiting its web site at to pursue binding arbitration.

CPR may be required to disclose personal data in response to a lawful request by public authorities, including to meet national security or law enforcement requests.