Craig Rapp Email & Phone Number

Columbus, Oh, Us

London, Gb

London, Gb

I lead a legal team that guides HSBC US in the areas of privacy, cyber, IP, third party risk, commercial transactions, AI and corporate real estate.

London, Gb

I am the legal subject matter expert for HSBC US in the areas of privacy, cyber and technology law.I advise the executive leadership team on legal issues relating to technology, procurement, privacy and information security. I work with key executive stakeholders that include the Chief Procurement Officer, Chief Privacy Officer, Chief Information Security Officer, Chief Information Officer and Chief Technology Risk OfficerI continually research new and emerging privacy and information security legislation and regulations.

Columbus, Ohio, Us

In this role, I advise the executive leadership team on legal issues relating to technology, procurement, privacy and information security. I work with key executive stakeholders that include the Chief Procurement Officer, Chief Privacy Officer, Chief Information Security Officer, Chief Information Officer and Chief Technology Risk OfficerI continually research new and emerging privacy and information security legislation and regulations.My scope of responsibility includes the drafting of multi-million dollar contracts, including custom development agreements, off-the-shelf licensing arrangements, ASP and cloud arrangements (SaaS, IaaS, PaaS), network connectivity and communications, professional services, consulting, hardware, infrastructure, technology, test and license agreements, and non-disclosure agreements.I provide guidance to the company on compliance with data breach laws, CCPA, GDPR, and state laws, providing recommendations to the Chief Privacy Officer and Chief Information Security Officer. I also review the bank’s privacy policies to ensure compliance with all legal and regulatory requirements, as well as industry best practices.I am the lead data breach response attorney, maintaining compliance with legal and regulatory requirements in the event of a breach of confidential information.I have also bolstered the bank’s information security posture through the review and revision of the Cyber Incident Response Plan, identifying and mitigating potential vulnerabilities.

Columbus, Ohio, Us

Columbus, Oh, Us

I launched and directed the CyberOhio initiative within the office of the chief legal officer of the State of Ohio.The CyberOhio program encompassed a framework of cybersecurity initiatives dedicated to safeguarding Ohio businesses against cyber-attacks.I supervised multiple teams, including the Cyber and Privacy Unit, Litigation support team, and eDiscovery team. I also oversaw the work of four subcommittees and an external advisory board.I trained teams to build competencies in privacy, information security, and technology.I envisioned and wrote SB220: The Ohio Data Protection Act, which became law in Ohio.I also negotiated a $25M agreement for the procurement of an automated biometric identification system and computerized criminal history.

I gained experience in Civil, Criminal, Administrative, Domestic, Probate, Juvenile, Constitutional Law, and Workers’ Compensation. I helped with cases involving issues raised to the Court of Appeals as well original mandamus actions.I supported the Judge by conducting legal research on issues before the court and drafting legal opinions for signoff by the Judge.

Columbus, Oh, Us

In this role, I represented Ohio state agencies in the Ohio Court of Claims and 10th District Court of Appeals on matters involving employment law, contracts, medical malpractice, and wrongful death.My achievements included serving as First Chair for 12 trials and as Second Chair for two trials.I also served as a member of the Moot Court Panel.

Juris Doctorate, Law

Bachelor Of Arts, Political Science And Philosophy