I am an attorney, Certified Information Privacy Professional (CIPP/US/G). I have an Ethics of AI certificate from the London School of Economics, and was selected to participate in the Wilson Center’s competitive six-week AI Lab for Executive Branch employees. Over the past 20+ years, my career has primarily focused on technology’s impact on society and public policy, especially data privacy. My most recent experience involves advising large companies on complying and implementing best practices and a variety of domestic and foreign privacy laws and regulations (e.g., General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Gramm-Leach-Bliley Act (GLBA), Fair Credit Reporting Act (FCRA), Telephone Consumer Protection (TCPA), Barbados Data Protection Act, and the Trinidad & Tobago Data Protection Act). This includes writing a variety of compliance documents, such as privacy and acceptable use policies, privacy notices, and processes for data subject rights, data privacy breaches, consent management, and key performance indicators.My career began in the telecommunications industry working for a law firm, a wireless trade association, the Federal Communications Commission as an attorney, and a telecommunications provider as a director of regulatory affairs. My privacy focus began when I joined the legal department of a media research company as a senior attorney, and shortly thereafter my role expanded when I was assigned the privacy portfolio and became the company’s privacy officer. Privacy’s complex issues and direct impact on all individuals intrigued me, so I became a privacy consultant for private and public sector clients; worked for the federal government addressing privacy and civil liberties issues (e.g., biometrics, drones, identity management, and information sharing); and was the privacy lead for a leading cloud service provider’s security organization.For me, data privacy is a consumer protection practice. This requires a practical approach to protecting a company or client’s legal interests while respecting and protecting the personal data of individuals entrusted with organizations.