Ellen Marie Giblin Email & Phone Number

Boston, Ma, Us

Privacy Compliance Lawyer and AI Professional, experienced, capable and candid to scope and build AI Privacy and Data Security programs to fit your company's Risk Management Profile with AI Risk Management.

New York, Ny, Us

Privacy Law Counsel in Top 4 Accounting Firm General Counsel’s Office working on Legal Compliance Projects: Privacy, HIPAA, GDPR, GLBA, and Canadian compliance program building. Canadian Work includes (Bill 64) Law 25 Analysis and Action Plan creation for operationalizing compliance. All while managing a high volume of PIA work for top Global Consultancy. Leadership and mentorship skills highly developed to bring business owners and stakeholders through the PIA process in an expedient manner to launch new programs, products and services.

Amsterdam, Noord-Holland, Nl

North American Privacy Officer for Philips. Philips is a leading health technology company focused on improving health and well-being. In this role I assisted with the Global GDPR program building efforts toward improving compliance. In addition, I assisted on drafting and processing many Privacy Impact Assessments and resolving each PIA with a formal Action Plan.

Boston, Ma, Us

As the HIPAA Privacy Officer, for the hospital and it’s foundations, investigated and remediated all confidential, PII data, PHI data issues and breaches. Oversaw all ongoing program building activities related to the development, implementation and maintenance of the organization’s privacy program, policies and practices and electronic health records in accordance with federal and state laws. In addition, I was an Ancillary Reviewer on the BCH Institutional Review Board (IRB) and provided advice and guidance on new research involving data use and data governance.Responsible for managing overall development and coordinating implementation of the institution’s privacy, cyber and data protection strategy, data governance and compliance plans as well as successfully closing open audit issues with remediation plans and deliverables. Created and delivered customized training across the hospital and foundations as LMS and live training for spot issues and to those not able to access LMS.

Boston, Ma, Us

At the Ashcroft Law Firm, headed by the former US Attorney General and US Attorneys, my primary responsibilities as Privacy and Data Protection Counsel for the firm included program building and managing the data breach response team for client incidents, executing as lead for client compliance engagements, performing privacy risk assessments, audits, and lead compliance remediation project teams. Client work included acting as large financial institution Privacy Counsel and at times as Chief Privacy Officer to establish and maintain an effective privacy and security program, report the status of the compliance program, test the compliance and accountability of their risk management program, policy framework creation and control documents and guides. Conduct process reviews to ensure policy compliance and investigate policy violations for counseling and terminations. Lead Counsel on a multi-million record breach touching 34 countries and territories with a complete plan for regulatory required notification.Direct vendor and third party privacy and security practice reviews. Review all new client products and services for privacy, data protection and legal risks and offer mitigation strategies. Create privacy and security training and educational awareness for executives and their workforce, including crisis management planning and awareness, business continuity planning and disaster recovery exercises.Oversight of data mapping, records retention and management projects, policy exceptions process and policy testing. Create responses to all Privacy and Data Security RFP’s and Corrective Action Plans and work plans for monitorships and oversight roles for enterprise compliance and risk reviews.

San Francisco, California, Us

Littler Mendelson - Privacy and Data Protection Group - Workplace Privacy.Privacy Counsel to Fortune 100 companies and financial institutions and other clients by leading compliance and regulatory projects and providing written legal opinions. Research and conduct due diligence for client compliance programs in the United States, such as Safe Harbor, EU and Non-EU Data Protection for those clients with global operations. Provide direction and counsel internally to Littler’s General Counsel and Chief Information Security Officer on Privacy and Data Protection matters including Privacy program building, information security standards, regulatory compliance, negotiating data security vendor agreements, social media, security and data breach incident management.Subject Matter Expert on social media and social networking and its acceptable use in the workplace. Assist is creating escalation teams to respond to client incidents with social media. Advise on “Insider Threat” as well as electronic monitoring and misconduct investigations of employees who disclose confidential information in violation of policy.Data Breach Incident Manager commencing with due diligence on data breach service providers and all related tasks including overseeing investigators, public relations, communications, forensics and drafting notices to state agencies and affected individuals. Create templates and resources to support clients at a rapid response rate and assist decision makers with critical issues on brand and incident management. Post-breach guidance and advice on mitigation and future risk management practices.Counselor in all aspects of privacy law, marketing laws and revising copy, regulatory advice and guidance, risk management and vendor management under GLBA, HIPAA, FERPA, ADA, ADEA, and state data protection laws. Privacy employment advice includes recruiting, pre-employment screening and telecommuting in the digital workplace.

Edinburgh, Scotland, Gb

Advise and provide program building guidance to executive management and colleagues on diverse privacy matters affecting business operations. Complete risk based approach to privacy by investigating, researching and resolving legal and privacy matters. Monitor operations to ensure awareness of and assessing compliance with applicable state and federal laws, regulations, and regulatory guidance.Act as Privacy Subject Matter Expert on state data protection and security breach laws, especially Massachusetts 93H and 201 CMR 17. Provide direct support to lobbyist and industry groups.

Boston, Massachusetts, Us

As Privacy and Special Legal Projects Counsel, I built a program with the Privacy and Compliance department processes to identify, assess, and mitigate issues of privacy and data protection risk and compliance in daily operations and special projects. Created and implemented processes for responding to data breach and information protection issues with members of the Legal, Privacy, Contracts, Security and Internal Audit teams.Delivered privacy training to the Privacy and Contracts teams, as well as executive management. Utilized excellent communication, negotiation and organization skills with a persuasive and confident manner, and resolved complex contract issues with global customers such as EU data processing. Negotiated and managed Iron Mountain's regulatory, privacy and compliance-related contract issues. Directed a large caseload of data protection, confidentiality, HIPAA, GLBA, FERPA, PIPEDA and customer service contracts in negotiation. Advised the General Counsel on special legal project requests for executive leadership. Created and published privacy and compliance legal articles and training presentations for the entire enterprise. Hired, managed, reviewed and trained five direct reports. Supported the Director of North American Contracts in planning, forecasting and budgeting department resources for projects.Extensive experience in negotiating business terms and contracts in high-pressure situations. Demonstrated experience in working collegially with customers and internal departments for matters affecting contracts, projects and programs.

Chestnut Hill, Ma, Us

Reported to the Education Admin. Dept. Chairman, researched and drafted articles for publication exploring human development and the use of Mindfulness in negotiations.Completed extensive legal research and regulatory compliance work for a project with the Mass. Dept. of Education regarding programming and licensure for the Principal in Public Schools. Other project work included, creating a school response plan for students with Anaphylaxis and a survey of Student Activism leading to Terrorism.

New York, Ny, Us

Insurance Defense CounselManaged a high volume of insurance defense cases in every stage of litigation as In-House Insurance Defense Counsel. Performed discovery, motions, pre-trial conferences, trials, negotiating settlements and mediation. Drafted all legal memoranda and pleadings for each case and was accountable for electronic management of my caseload.

Juris Doctorate, Contracts, Negotiation, Mediation And Privacy

Master Of Education - Med, Higher Education/Higher Education Administration

Bachelor Of Science (B.S.), Advanced Legal Research/Studies, General

Artificial Intelligence

Education record

Doctor Of Law - Jd, Privacy And Compliance

Master'S Degree In Higher Ed And Human Development, Privacy And Compliance

Masters In Higher Education, Education

Juris Doctorate, Privacy Law

Juris Doctorate, Law

Doctor Of Law - Jd, Law Privacy And Compliance

Juris Doctorate Law, Law And Compliance

Juris Doctorate, Law

Juris Doctorate, Privacy Compliance Law

Education record

Doctor Of Law - Jd, Privacy Risk Management

Master Of Education - Med, Human Resources Development

Juris Doctorate, Privacy And Compliance

Juris Doctorate, Privacy, Compliance And Risk Management

Juris Doctorate, Legal Studies, General Privacy

Doctor Of Law - Jd, Data Protection

Juris Doctorate, Law