Katherine Carpenter Email & Phone Number

San Francisco, Ca, Us

Worked with mid-level to C-suite executives by creating and implementing strategies to understand and mitigate risk. ● Streamlined Apple’s vendor management program. ● Advised DHS on cross-border data flows.● Negotiated, drafted & updated terms of use, data use, & privacy policies (notices/documents), ● DPIAs, DPAs, DTIAs, BAAs, Data Breach Responses (10+ orgs). ● Created security & compliance assessment for small & medium-sized businesses. Additional responsibilities included: Marketing and database compliance issues, marketing in social and mobile environments, compliance with CAN-SPAM and the Children's Online Privacy Protection Act, privacy-by-design (or default), cybersecurity policies, risk management strategy, data use, regulatory compliance, data protection, cybersecurity & incident management, product development, identify legal strategies for labor and employment, global intellectual property and privacy matters.

● Interim Privacy Counsel Global SaaS Company (heavily regulated; 1001-5000; Private) – Worked with executives to create and implement strategies to grow business, maintain customer relationships. Partnered with CISO to improve customer security posture. Responsible for addressing ongoing commercial and legal needs of internal user groups including technology, business development, sales, and information security. ● Compliance Counsel Multinational Cybersecurity Company (10,000+; Private) – Updated documentation and compliance structure post-acquisition. Contributed to the strategy for following export laws/sanctions with global customers the Ukraine conflict began. Managed vendor onboarding & agreements, performed DPIAs and DTIAs regarding EU data transfer, supported regulatory compliance (OneTrust). ● Privacy, Policy & Compliance Counsel Domestic FinTech Company (1001-5000; subsidiary of 10k+ Public Co.) – Provided guidance on how regulations would impact new product lines. Led cross-functional projects in multiple verticals to manage risks, assessed business impact of new and evolving regulatory requirements in the financial products space. Educated partners on regulatory compliance issues related to debt and asset management.

San Francisco, California, Us

Served as EarnUp’s first in-house counsel; developed practical, cross-functional and strategic procedures, policies and other structural solutions to improve organizational performance and to manage and reduce legal risk in a high-growth, entrepreneurial environment. Provided cross-functional legal guidance on platform redesign and launch including reviewing marketing material, product flow, consumer-facing language to ensure compliance with privacy and data security laws. Led third-party diligence with partner banks, VCs, other organizations; facilitated post-acquisition compliance/diligence with CFPB consent order. Prepared for CCPA enforcement. Drafted & updated regulatory policies & training; Drafted and negotiated NDAs, contracts, and MSAs; managed outside counsel.

Geneva 27, Ge, Ch

Designed research study to measure drowning deaths for WHO Department of Violence and Injury Prevention and Disability.

Aurora, Co, Us

Implemented State and Federal policies (Academic Medical Centers, Medicaid Funding, Federal Regulatory Compliance); prepared for Accountable Care Act. Developed Material Transfer Contracts for Research & inter-organizational use. Researched health-related issues, wrote legal memoranda and summaries discussing: Academic Medical Centers, Material transfers, Pediatric Accountable Care Organizations. - focus: Financial savings, Medicaid funding, ARRA 2009, Federal Regulatory Compliance.

Seattle, Wa, Us

Co-designed, coordinated, conducted focus group project discussing teen concerns surrounding the privacy of genetic data (HIPAA compliance, informed consent, genetic counseling, social media & health information). Facilitated research projects from conception to publication: - Drafted consent/assent forms and assisted projects through human subjects review. - Implemented security controls for data collection and storage (encryption, password protection, strong passwords, locked hard drives).- Quantitative and qualitative analysis with Atlas.ti & Excel; literature reviews in law, bioethics, and medicine. - Edited papers prior to submission in peer-reviewed journals. - Handled confidential information.

Seattle, Wa, Us

Reviewed biomedical and sociobehavioral research studies for the University of Washington to make sure research design & protocol met institutional, state, and federal regulations and policies.

Jd

Health, Science, Technology Law

Ma, International Studies

Bachelor Of Arts (Ba), Sociology