Providing privacy and cybersecurity consulting services to major financial services company clients, including privacy program strategy, maturity assessments, and program and process design.

Acted as privacy subject matter in a global mapping and location services company. Key activities include:-Privacy program development, maintenance, and operations, including creation of policies and procedures and establishing tooling for operational privacy matters such as data protection impact assessments, records of processing activities, and responding to requests from individuals to exercise privacy rights. -Developing requirements and participated in substantive reviews with engineering and development teams to incorporate privacy by design into software development.-Providing guidance and analysis regarding global privacy requirements. Key regulations include the EU General Data Protection Regulation and ePrivacy Directive, the California Consumer Privacy Act and other US state and federal laws, the Brazil LGPD, and other global privacy laws as applicable.-Reviewing and negotiating contracts with customers and suppliers, including data processing agreements, detailed security requirements, HIPAA business associate agreements, and other applicable privacy and security terms.-Leading analysis and implementation projects for the California Consumer Privacy Act, and retaining responsibility for monitoring and influencing activities related to developing US state and federal privacy laws.-Conducting diligence on suppliers, and responding to diligence investigations by customers.-Supporting incident investigation and response activities, including analysis of notification obligations.

Served as associate general counsel and privacy officer for an IT consulting and cloud services company, with wide-ranging responsibilities which included:-Was lead legal contact for data security and compliance matters, including negotiating HIPAA business associate agreements, responding to client data security questionnaires, and developing HIPAA and general data security compliance programs.-Negotiated a high volume of contracts with clients, vendors, and partners, including professional services agreements, cloud services agreements, hardware purchase agreements, distributor and reseller agreements, and referral agreements.-Managed trademark portfolio, including filing renewals and prosecuting new trademark applications.

Co-taught a practical skills course in technology contracting. My portion of the course was focused on privacy and data security (primarily HIPAA business associate agreements and common enterprise data security requirements), and on enterprise client master agreements.

Assisted early stage startups with a variety of transactional and advisory matters, including:-Compliance with privacy and data security regulations, including COPPA, FERPA, and HIPAA.-Created privacy policies, terms of use, and template agreements to help clients launch new products and services.-Conducted trademark searches and filings.-Reviewed and negotiated a wide variety of contracts, including partnership and referral agreements, private equity NDAs, and services agreements.

Negotiated and drafted IT agreements in a global, multi-entity environment. Specific experience includes:• Negotiating and drafting more than 200 technology and business services contracts, including outsourcing agreements, cloud services agreements, software license agreements, marketing agency agreements, and hardware purchasing agreements.• Assisting with divestiture activities including contract analysis, drafting transitional service agreements, and renegotiating vendor relationships to address changes in services post-divestiture.• Negotiating privacy and data protection provisions for US, regional, and global master agreements, which required working knowledge of US and global data security regulations impacting the banking sector, including the Gramm-Leach Bliley Act (including post-2013 OCC vendor management requirements) and the FACTA Red Flags Rule.

Worked with startups and small businesses with corporate transactions, contract drafting, privacy policies, and trademark filing and prosecution.

Assisted in all aspects of financial sector employment cases, including drafting motions and memoranda, filing documents in Federal District Court, document review, and managing document production.

Researched and drafted orders disposing of motions before the court.